Alert GCSA-16058 - Bollettino di Sicurezza Microsoft Dicembre 2016

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

**********************************************************************

Alert ID: GCSA-16058
Data: 14 Dicembre 2016
Titolo: Bollettino di Sicurezza Microsoft Dicembre 2016

**********************************************************************

:: Descrizione del problema

Microsoft ha rilasciato 12 bollettini di sicurezza relativi
a vulnerabilita' presenti nei sistemi operativi Windows
e in varie applicazioni:

  Cumulative Security Update for Internet Explorer 
  Cumulative Security Update for Microsoft Edge
  Security Update for Microsoft Graphics Component
  Security Update for Microsoft Uniscribe 
  Security Update for Microsoft Office
  Security Update for Microsoft Windows 
  Security Update for Secure Kernel Mode 
  Security Update for Windows Kernel-Mode Drivers
  Security Update for Windows Kernel 
  Security Update for Common Log File System Driver
  Security Update for Adobe Flash Player 
  Security Update for .NET Framework 

Per una descrizione completa delle vulnerabilita' consultare
le segnalazioni ufficiali.


:: Software interessato

  .NET Framework 
  Adobe Flash Player
  Common Log File System Driver
  Windows Kernel
  Kernel-Mode Driver
  Windows Secure Kernel Mode
  Windows
  Microsoft Office
  Microsoft Uniscribe
  Microsoft Graphics Component
  Update for Microsoft Edge
  Internet Explorer 


:: Impatto

  Esecuzione remota di codice arbitrario
  Acquisizione di privilegi piu' elevati
  Bypass delle funzionalita' di sicurezza
  Information disclosure
  Corruzione della memoria


:: Soluzioni

  Per default l'installazione degli aggiornamenti
  avviene in maniera automatica.

  Gli aggiornamenti sono inoltre disponibili tramite:
  http://go.microsoft.com/fwlink/?LinkID=40747


:: Riferimenti

Riepilogo dei bollettini Microsoft sulla sicurezza
  https://technet.microsoft.com/library/security/MS16-DEC

Bollettini Microsoft sulla sicurezza
  https://technet.microsoft.com/library/security/ms16-144
  https://technet.microsoft.com/library/security/ms16-145
  https://technet.microsoft.com/library/security/ms16-146
  https://technet.microsoft.com/library/security/ms16-147
  https://technet.microsoft.com/library/security/ms16-148
  https://technet.microsoft.com/library/security/ms16-149
  https://technet.microsoft.com/library/security/ms16-150
  https://technet.microsoft.com/library/security/ms16-151
  https://technet.microsoft.com/library/security/ms16-152
  https://technet.microsoft.com/library/security/ms16-153
  https://technet.microsoft.com/library/security/ms16-154
  https://technet.microsoft.com/library/security/ms16-155

Security Tracker
  http://securitytracker.com/id/1037455
  http://securitytracker.com/id/1037454
  http://securitytracker.com/id/1037453
  http://securitytracker.com/id/1037452
  http://securitytracker.com/id/1037451
  http://securitytracker.com/id/1037450
  http://securitytracker.com/id/1037448
  http://securitytracker.com/id/1037444
  http://securitytracker.com/id/1037441
  http://securitytracker.com/id/1037440
  http://securitytracker.com/id/1037438


I riferimenti CVE sono disponibili nelle segnalazioni originali.


GARR CERT Newsletter subscribe/unsubscribe:
http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlhRbBwACgkQwZxMk2USYEIv4ACgsaOeIotuStUaQqf9Ah2jYpTa
sqkAn0CEKYMZbxTE9vWlKezQem2KeDhh
=8Tu/
-----END PGP SIGNATURE-----