Alert GCSA-15049 - Bollettino di Sicurezza Microsoft Dicembre 2015

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

   Alert ID: GCSA-15049
   Data: 10 Dicembre 2015
   Titolo: Bollettino di Sicurezza Microsoft Dicembre 2015

******************************************************************

:: Descrizione del problema

   Microsoft ha rilasciato 12 bollettini di sicurezza relativi
   a vulnerabilita' presenti nei sistemi operativi Windows
   ed in altre applicazioni:

   MS15-124 Cumulative Security Update for Internet Explorer (3116180)
   MS15-125 Cumulative Security Update for Microsoft Edge (3116184)
   MS15-126 Cumulative Security Update for JScript and VBScript (3116178)
   MS15-127 Security Update for Microsoft Windows DNS (3100465)
   MS15-128 Security Update for Microsoft Graphics Component (3104503)
   MS15-129 Security Update for Silverlight (3106614)
   MS15-130 Security Update for Microsoft Uniscribe (3108670)
   MS15-131 Security Update for Microsoft Office (3116111)
   MS15-132 Security Update for Microsoft Windows (3116162)
   MS15-133 Security Update for Windows PGM (3116130)
   MS15-134 Security Update for Windows Media Center (3108669)
   MS15-135 Security Update for Windows Kernel-Mode Drivers (3119075)

   Maggiori dettagli sono disponibili nella segnalazioni ufficiali
   alla sezione "Riferimenti".


:: Software interessato

   Internet Explorer
   Microsoft Edge
   Microsoft Windows
   Microsoft Windows Server
   Microsoft Office
   Microsoft .NET Framework
   Microsoft Lync
   Skype for Business
   Microsoft Silverlight


:: Impatto

   Esecuzione remota di codice arbitrario
   Acquisizione di privilegi piu' elevati


:: Soluzioni

   Installare manualmente le patch indicate nei bollettini Microsoft,
   oppure utilizzare uno degli strumenti di aggiornamento come:
   Aggiornamenti Automatici, Windows Update, Microsoft Update,
   Windows Server Update Services, Systems Management Server.


:: Riferimenti

   Riepilogo dei bollettini Microsoft sulla sicurezza, dicembre 2015
   https://technet.microsoft.com/library/security/ms15-dec

   Bollettini Microsoft sulla sicurezza
   https://technet.microsoft.com/it-it/library/security/MS15-124
   https://technet.microsoft.com/it-it/library/security/MS15-125
   https://technet.microsoft.com/it-it/library/security/MS15-126
   https://technet.microsoft.com/it-it/library/security/MS15-127
   https://technet.microsoft.com/it-it/library/security/MS15-128
   https://technet.microsoft.com/it-it/library/security/MS15-129
   https://technet.microsoft.com/it-it/library/security/MS15-130
   https://technet.microsoft.com/it-it/library/security/MS15-131
   https://technet.microsoft.com/it-it/library/security/MS15-132
   https://technet.microsoft.com/it-it/library/security/MS15-133
   https://technet.microsoft.com/it-it/library/security/MS15-134
   https://technet.microsoft.com/it-it/library/security/MS15-135

   Microsoft Knowledge Base
   http://support.microsoft.com/kb/3116180
   http://support.microsoft.com/kb/3116184
   http://support.microsoft.com/kb/3116178
   http://support.microsoft.com/kb/3100465
   http://support.microsoft.com/kb/3104503
   http://support.microsoft.com/kb/3106614
   http://support.microsoft.com/kb/3108670
   http://support.microsoft.com/kb/3116111
   http://support.microsoft.com/kb/3116162
   http://support.microsoft.com/kb/3116130
   http://support.microsoft.com/kb/3108669
   http://support.microsoft.com/kb/3119075

   Microsoft Update
   http://windowsupdate.microsoft.com
   https://www.update.microsoft.com/
   http://support.microsoft.com/kb/294871

   SANS ISC Diary
   https://isc.sans.edu/diary.html?storyid=20461

   I riferimenti CVE sono disponibili
   nelle segnalazioni originali.


GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----

iD8DBQFWaVyMwZxMk2USYEIRAhQGAJ0QafgEQhPhqa4KismXisxnyONBBwCgw8dD
JF6CV50lSu0tEiUUW3lX8ZU=
=bQtQ
-----END PGP SIGNATURE-----