Alert GCSA-12073 - Microsoft Security Bullettin December 2012

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

     Alert ID : GCSA-12073
         Data : 12 Dicembre 2012
       Titolo : Microsoft Security Bullettin December 2012

******************************************************************

:: Descrizione del problema

    Microsoft ha rilasciato 7 bollettini di sicurezza relativi
    a vulnerabilita' presenti nei sistemi operativi Windows
    e in altre applicazioni:

    MS12-077 Aggiornamento cumulativo per la protezione di Internet Explorer (2761465)
    MS12-078 Vulnerabilita' nei driver in modalita' kernel di Windows (2783534)
    MS12-079 Vulnerabilita' in Microsoft Word (2780642)
    MS12-080 Vulnerabilita' in Microsoft Exchange Server (2784126)
    MS12-081 Vulnerabilita' legata al componente di gestione dei file in Windows (2758857)
    MS12-082 Vulnerabilita' in Microsoft DirectPlay (2770660)
    MS12-083 Vulnerabilita' nel componente IP-HTTPS (2765809)

    Maggiori dettagli sono disponibili nella segnalazioni ufficiali
    alla sezione "Riferimenti".


:: Software interessato

    Internet Explorer
    Microsoft Windows
    Microsoft Office
    Microsoft Exchange Server


:: Impatto

    Esecuzione remota di codice arbitrario
    Elusione di funzioni di protezione


:: Soluzioni

    Installare manualmente le patch indicate nei bollettini Microsoft,
    oppure utilizzare uno degli strumenti di aggiornamento come:
    Aggiornamenti Automatici, Windows Update, Microsoft Update,
    Windows Server Update Services, Systems Management Server.


:: Riferimenti

    Riepilogo dei bollettini Microsoft sulla sicurezza - dicembre 2012
    http://technet.microsoft.com/it-it/security/bulletin/ms12-dec

    Bollettini Microsoft sulla sicurezza
    http://technet.microsoft.com/it-it/security/bulletin/ms12-077
    http://technet.microsoft.com/it-it/security/bulletin/ms12-078
    http://technet.microsoft.com/it-it/security/bulletin/ms12-079
    http://technet.microsoft.com/it-it/security/bulletin/ms12-080
    http://technet.microsoft.com/it-it/security/bulletin/ms12-081
    http://technet.microsoft.com/it-it/security/bulletin/ms12-082
    http://technet.microsoft.com/it-it/security/bulletin/ms12-083

    Microsoft Knowledge Base
    http://support.microsoft.com/kb/2761465
    http://support.microsoft.com/kb/2783534
    http://support.microsoft.com/kb/2780642
    http://support.microsoft.com/kb/2784126
    http://support.microsoft.com/kb/2758857
    http://support.microsoft.com/kb/2770660
    http://support.microsoft.com/kb/2765809

    Microsoft Update
    http://windowsupdate.microsoft.com
    https://www.update.microsoft.com/
    http://support.microsoft.com/kb/294871

    Mitre CVE
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2545
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4781
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4782
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4787
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2556
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4786
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2539
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3214
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3217
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4791
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4774
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1537
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2549

    SANS ISC Diary
    http://isc.sans.edu/diary.html?storyid=14683
-----BEGIN PGP SIGNATURE-----

iD8DBQFQyKw6wZxMk2USYEIRAs8iAJ94cEZbxdEXlgd1e6NEJ6UK8gp9SQCfcvFr
2EEFeOuKzCBEeN4Tmd1gNvA=
=OWza
-----END PGP SIGNATURE-----