Alert GCSA-10163 - Vulnerabilita' in Microsoft Office (MS10-087)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



******************************************************************

    Alert ID : GCSA-10163
        Data : 10 Ottobre 2010
      Titolo : Vulnerabilita' in Microsoft Office (MS10-087)

******************************************************************


:: Descrizione del problema

    Sono state riscontrate multiple vulnerabilita' in Microsoft
Office che potrebbero essere sfruttate da un attaccante remoto per
eseguire codice arbitrario inducendo l'utente ad aprire documenti RTF
malevoli in e-mail appositamente predisposti.


:: Software interessato

    Microsoft Office XP Service Pack 3
    Microsoft Office 2003 Service Pack 3
    Microsoft Office 2007 Service Pack 2
    Microsoft Office 2010 (32-bit editions)
    Microsoft Office 2010 (64-bit editions)
    Microsoft Office for Mac
    Microsoft Office 2004 for Mac
    Microsoft Office 2008 for Mac
    Microsoft Office for Mac 2011


:: Impatto

     Esecuzione da remoto di codice arbitrario


:: Soluzioni

    Installare manualmente la patch elencata nel bollettino Microsoft,
    oppure utilizzare uno degli strumenti di aggiornamento come:
    Aggiornamenti Automatici, Windows Update, Microsoft Update,
    Windows Server Update Services.


:: Riferimenti

Microsoft Security Bulletin
   http://www.microsoft.com/technet/security/Bulletin/ms10-087.mspx

VUPEN
   http://www.vupen.com/english/advisories/2010/2923

Secunia
   http://secunia.com/advisories/38521

Mitre's CVE ID
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3333
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3334
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3335
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3336
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3337



-----BEGIN PGP SIGNATURE-----

iQCVAwUBTNvxMvOB+SpikaiRAQITaAP5AddWDwrO8L1tu9oDo3H1sa7p899JEsWT
xQrRAJ9I96M/18stEuR4YDs8JZ3RqgVV1M9DpQgS7BW5pkQsvMbp1eirhT1rPCtg
cH+n9JEFJcMRRBLLtCiZgH0xcT0H+Fea6AMeiqSo5uhEEcPZNA90ZRyDeYQZ7v+O
Oatn4UmJjF4=
=Xrgt
-----END PGP SIGNATURE-----