FYI...
MS Security Updates - June 2017
- https://portal.msrc....curity-guidance
June 13, 2017
> https://portal.msrc....uidance/summary
Total items: 85 [June 14, 2017] / Total items: 88 [June 22, 2017] / Total items: 89 [June 23, 2017]
- https://portal.msrc....db-000d3a32fc99
June 13, 2017 - "The June security release consists of security updates for the following software:
Internet Explorer
Microsoft Edge
Microsoft Windows
Microsoft Office and Microsoft Office Services and Web Apps
Silverlight
Skype for Business and Lync
Adobe Flash Player ..."
June 2017 security update release
- https://blogs.techne...update-release/
June 13, 2017
MS Security Advisory 4025685
Guidance related to June 2017 security update release
- https://technet.micr...ty/4025685.aspx
June 13, 2017
- http://www.securityt....com/id/1038667
CVE Reference: CVE-2017-8543
Jun 13 2017
Impact: Execution of arbitrary code via network, User access via network
Fix Available: Yes Vendor Confirmed: Yes
Version(s): 7 SP1, 2008 R2 SP1, 2008 SP2, 2012, 8.1, 2012 R2, RT 8.1, 10, 10 Version 1511, 2016, 10 Version 1607, 10 Version 1703
Description: A vulnerability was reported in Windows Search. A remote user can execute arbitrary code on the target system.
A remote user can send specially crafted SMB data to trigger an object memory handling error in Windows Search and execute arbitrary code on the target system.
Impact: A remote user can execute arbitrary code on the target system.
Solution: The vendor has issued a fix.
- https://portal.msrc....y/CVE-2017-8543
___
June 2017 Office Update Release
- https://blogs.techne...update-release/
June 9, 2017 - "... This month, there are 51 security updates and 27 non-security updates. All of the security and non-security updates are listed in KB article 4023935*.
A new version of Office 2013 Click-To-Run is available: 15.0.4937.1000
A new version of Office 2010 Click-To-Run is available: 14.0.7182.5000"
* https://support.micr...icrosoft-office
Last Review: Jun 13, 2017 - Rev: 9
___
Additional references:
- http://www.securityt....com/id/1038659
- http://www.securityt....com/id/1038661
- http://www.securityt....com/id/1038662
- http://www.securityt....com/id/1038663
- http://www.securityt....com/id/1038664
- http://www.securityt....com/id/1038666
- http://www.securityt....com/id/1038667
- http://www.securityt....com/id/1038668
- http://www.securityt....com/id/1038669
- http://www.securityt....com/id/1038670
- http://www.securityt....com/id/1038671
- http://www.securityt....com/id/1038673
- http://www.securityt....com/id/1038674
- http://www.securityt....com/id/1038675
- http://www.securityt....com/id/1038676
- http://www.securityt....com/id/1038678
- http://www.securityt....com/id/1038680
- http://www.securityt....com/id/1038701
- http://www.securityt....com/id/1038702
Jun 15 2017
___
ghacks Analysis:
- https://www.ghacks.n...e-2017-release/
Microsoft Security Patches for June 2017 - [See 'Executive Summary']
- https://www.thezdi.c...y-update-review
June 13, 2017 - [Scroll down to: 'Microsoft Patches for June 2017']
Qualys Analysis:
- https://blog.qualys....ive-june-update
June 13, 2017 - "Today Microsoft released patches to fix 94 vulnerabilities out of which 27 fix remote code execution issues which can allow an attackers to remotely take control of victim machines. This is a massive update and fixes more than double the number of vulnerabilities as compared to the last two months... Overall its a large security update which is almost double as compared to last two months in the number of patched vulnerabilities. Actively exploited SMB issue CVE-2017-8543* and other Font, Outlook, Office, Edge and IE issues are sure to keep system administrators and security teams busy."
* https://portal.msrc....y/CVE-2017-8543
___
- https://www.us-cert....ecurity-Updates
June 13, 2017
Edited by AplusWebMaster, 23 June 2017 - 10:53 AM.