Month: December 2010

2010 年 12 月のセキュリティ情報 (月例)

Japan Security Team / By / June 26, 2019

先週の事前通知でお伝えした通り、セキュリティ情報計 17 件 (緊急 2 件、重要 14 件、警告 1 件) を公開しました。今月のセキュリティ情報では、Internet Explorer のセキュリティ アドバイザリ 2458511に対処した MS10-090 を公開しています。また、MS10-093、MS10-094、MS10-095、MS10-096、MS10-097 で、それぞれ Windows ムービー メーカー、Windows Media エンコーダー、Microsoft Windows、Windows アドレス帳、インターネット接続のサインアップ ウィザードの、安全でないライブラリのロードの脆弱性を修正し、セキュリティ アドバイザリ 2269637 を更新しています。そのほか、認証に対する保護強化のセキュリティアドバイザリ 973811に Microsoft Outlook を追加しました。 また、Internet Explorer の累積的なセキュリティ更新プログラム MS10-090 の既知の問題に対応した重要な更新プログラム KB2467659 も同日公開していますので、合わせて適用をお願いします。既知の問題の詳細につきましては、サポート技術情報 2416400をご参照ください。 2010 年 12 月のセキュリティ情報:各セキュリティ情報の概要、各脆弱性の悪用可能性指標 (Exploitability Index)、更新プログラムのダウンロード先などがご覧いただけます。http://www.microsoft.com/japan/technet/security/bulletin/ms10-dec.mspx 家庭でご利用の方は、絵でみるセキュリティ情報をご覧ください。http://www.microsoft.com/japan/security/bulletins/default.mspx 情報番号 タイトル 深刻度 脆弱性の影響 影響を受けるソフトウェア 回避策 再起動 …

2010 年 12 月のセキュリティ情報 (月例) Read More »

More about the Office File Validation backport plan

MSRC / By / June 20, 2019

In November 2010, Microsoft released the first Security Bulletin (MS10-079) against an Office 2010 component, in this case Microsoft Word. Approximately 6 months had elapsed since Office 2010 launched in May and while it’s good for such a widely used product to be available for so long without any reported issues, we were naturally disappointed …

More about the Office File Validation backport plan Read More »

Benefits of Office 2010 File Validation will be made available for Office 2003 and 2007

MSRC / By / June 20, 2019

Hello everyone — We’re really excited to announce that Office File Validation, currently part of Office 2010, will soon be made available for Office 2003 and 2007. During development of Office 2010, the Office Team, in conjunction with members of the Microsoft Engineering Center (MSEC) organization, performed a number of actions to increase protections for …

Benefits of Office 2010 File Validation will be made available for Office 2003 and 2007 Read More »

December 2010 Security Bulletin Release

MSRC / By / June 20, 2019

Hi everyone. As part of our usual cycle of monthly security updates, today Microsoft is releasing 17 bulletins addressing 40 vulnerabilities in Microsoft Windows, Office, Internet Explorer, SharePoint Server and Exchange. Two of those bulletins carry a Critical rating, while 14 are rated Important and one is rated Moderate. We’ve assigned our highest deployment priority …

December 2010 Security Bulletin Release Read More »

Assessing the risk of the December security updates

Security Research & Defense / By / June 20, 2019

Today we released seventeen security bulletins.  Two have a maximum severity rating of Critical, fourteen have a maximum severity rating of Important, and one has a maximum severity rating of Moderate.  We hope that the table below helps you prioritize the deployment of the updates appropriately for your environment.   Bulletin Most likely attack vector …

Assessing the risk of the December security updates Read More »

MS10-104: SharePoint 2007 Vulnerability

Security Research & Defense / By / June 20, 2019

Today we released MS10-104 to address vulnerability CVE-2010-3964 in SharePoint 2007 server with an important severity rating. In this blog, we would like to cover some additional details of this vulnerability.   Is my SharePoint server affected by this vulnerability?   There are two types of installations for a SharePoint server: standalone and farm. A standalone …

MS10-104: SharePoint 2007 Vulnerability Read More »

MS10-105: Image Filters Update

Security Research & Defense / By / June 20, 2019

This month we shipped a security update and bulletin (ms10-105) to address vulnerabilities in the .cgm, .tif, .fpx, and .pct image filters.  These filters are shipped with Microsoft Office to extend image rendering for applications.  Neither Office 2010 nor Office 2007 use filters to perform rendering by default.  Both use GDI+ instead.  Historically, if an …

MS10-105: Image Filters Update Read More »

2010年12月15日のセキュリティリリース予定 (月例)

Japan Security Team / By / June 26, 2019

2010年12月15日に予定している月例のセキュリティリリースについてのお知らせです。来週水曜日に公開を予定しているセキュリティ情報は、17 件 (緊急 2 件、重要 14 件、警告 1 件) です。また、毎月リリースと同日に公開している Webcast の ワンポイント セキュリティも、当日午後に公開予定です。 公開予定の詳細は、以下の事前通知のサイトをご覧ください。http://www.microsoft.com/japan/technet/security/bulletin/ms10-dec.mspx セキュリティ情報 ID 最大深刻度 脆弱性の影響 再起動の必要性 影響を受けるソフトウェア* セキュリティ情報 1   緊急 リモートでコードが実行される 要再起動 Microsoft Windows XP、Windows Server 2003、Windows Vista、Windows Server 2008、Windows 7 および Windows Server 2008 R2 セキュリティ情報 2   緊急 リモートでコードが実行される 要再起動 Microsoft Windows XP、Windows Server 2003、Windows Vista、Windows Server 2008、Windows …

2010年12月15日のセキュリティリリース予定 (月例) Read More »

December 2010 Advance Notification Service is released

MSRC / By / June 20, 2019

Hi everyone. Mike Reavey from the MSRC here. Today we’re releasing our Advance Notification Service for the December 2010 security bulletin release. As we do every month, we’ve given information about the coming December release and provided links to detailed information so you can plan your deployment by product, service pack level, and severity.  However, …

December 2010 Advance Notification Service is released Read More »

On the effectiveness of DEP and ASLR

Security Research & Defense / By / June 20, 2019

DEP (Data Execution Prevention) and ASLR (Address Space Layout Randomization) have proven themselves to be important and effective countermeasures against the types of exploits that we see in the wild today.  Of course, any useful mitigation technology will attract scrutiny, and over the past year there has been an increasing amount of research and discussion …

On the effectiveness of DEP and ASLR Read More »