保安警報 (A17-04-03): Microsoft 產品多個漏洞 (2017年4月)


 

發布日期: 2017 年 4 月 12 日

  
  

描述:

Microsoft 發布了46個安全性更新,以應對多個影響個別 Microsoft 產品或元件的漏洞。


受影響的系統:

  • Microsoft Internet Explorer 9, 10, 11
  • Microsoft Edge
  • Microsoft Windows Vista, 7, 8.1, RT 8.1, 10
  • Microsoft Windows Server 2008, 2008 R2, 2012, 2012 R2, 2016
  • Microsoft Office 2007, 2010, 2013, 2013RT, 2016
  • Microsoft Office Compatibility Pack 2
  • Microsoft Office Web Apps 2010
  • Microsoft Office Web Apps Server 2013
  • Microsoft Office Online Server
  • Microsoft OneNote 2007, 2010
  • Microsoft SharePoint Server 2010, 2013
  • Microsoft Silverlight 5
  • Microsoft .NET Framework 2.0 Service Pack 2, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.4, 4.6.2, 4.6, 4.6.1, 4.7

有關受影響產品的完整列表,請參閱Microsoft資訊安全技術中心:

https://portal.msrc.microsoft.com/en-us/security-guidance


影響:

成功利用這些漏洞可以導致服務受阻斷、提高權限、泄漏資訊、遠端執行程式碼、繞過保安限制或仿冒詐騙,視乎攻擊者利用哪個漏洞而定。


建議:

受影響產品的修補程式可在 Windows Update 或 Microsoft Update Catalog 獲取。受影響系統的用戶應遵從產品供應商的建議,立即採取行動以降低風險。


進一步資訊:

https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/42b8fa28-9d09-e711-80d9-000d3a32fc99
https://www.hkcert.org/my_url/en/alert/17041201
https://www.us-cert.gov/ncas/current-activity/2017/04/12/Microsoft-Releases-April-2017-Security-Updates
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6629
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0058
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0093
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0106
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0155 (to CVE-2017-0156)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0158 (to CVE-2017-0160)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0162 (to CVE-2017-0169)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0178 (to CVE-2017-0186)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0188 (to CVE-2017-0189)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0191 (to CVE-2017-0192)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0194 (to CVE-2017-0195)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0197
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0199 (to CVE-2017-0205)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0207 (to CVE-2017-0208)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0210 (to CVE-2017-0211)
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2605
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3447
https://helpx.adobe.com/security/products/flash-player/apsb17-10.html
https://helpx.adobe.com/security/products/flash-player/apsb17-11.html


相關的 Microsoft 知識庫:


Adobe Flash Player
    https://support.microsoft.com/en-us/help/4018483

Excel Services
    https://support.microsoft.com/en-us/help/3178724
    https://support.microsoft.com/en-us/help/3191840

Internet Explorer 10
    https://support.microsoft.com/en-us/help/4015551

Internet Explorer 11
    https://support.microsoft.com/en-us/help/4015217
    https://support.microsoft.com/en-us/help/4015219
    https://support.microsoft.com/en-us/help/4015221
    https://support.microsoft.com/en-us/help/4015549
    https://support.microsoft.com/en-us/help/4015550
    https://support.microsoft.com/en-us/help/4015583

Internet Explorer 9
    https://support.microsoft.com/en-us/help/4014661

Microsoft .NET Framework 2.0 Service Pack 2
    https://support.microsoft.com/en-us/help/4014984

Microsoft .NET Framework 3.5
    https://support.microsoft.com/en-us/help/4014982
    https://support.microsoft.com/en-us/help/4014983
    https://support.microsoft.com/en-us/help/4015217
    https://support.microsoft.com/en-us/help/4015219
    https://support.microsoft.com/en-us/help/4015221
    https://support.microsoft.com/en-us/help/4015583

Microsoft .NET Framework 3.5.1
    https://support.microsoft.com/en-us/help/4014981

Microsoft .NET Framework 4.5.2
    https://support.microsoft.com/en-us/help/4014981
    https://support.microsoft.com/en-us/help/4014982
    https://support.microsoft.com/en-us/help/4014983
    https://support.microsoft.com/en-us/help/4014984

Microsoft .NET Framework 4.6
    https://support.microsoft.com/en-us/help/4014984
    https://support.microsoft.com/en-us/help/4015221

Microsoft .NET Framework 4.6.1
    https://support.microsoft.com/en-us/help/4015219

Microsoft .NET Framework 4.6.2
    https://support.microsoft.com/en-us/help/4014981
    https://support.microsoft.com/en-us/help/4014982
    https://support.microsoft.com/en-us/help/4014983
    https://support.microsoft.com/en-us/help/4015217

Microsoft .NET Framework 4.6/4.6.1
    https://support.microsoft.com/en-us/help/4014981
    https://support.microsoft.com/en-us/help/4014982
    https://support.microsoft.com/en-us/help/4014983

Microsoft .NET Framework 4.7
    https://support.microsoft.com/en-us/help/4015583

Microsoft Edge
    https://support.microsoft.com/en-us/help/4015217
    https://support.microsoft.com/en-us/help/4015219
    https://support.microsoft.com/en-us/help/4015221
    https://support.microsoft.com/en-us/help/4015583

Microsoft Excel 2007 Service Pack 3
    https://support.microsoft.com/en-us/help/3191827

Microsoft Excel 2010 Service Pack 2 (32-bit editions)
    https://support.microsoft.com/en-us/help/3191847

Microsoft Excel 2010 Service Pack 2 (64-bit editions)
    https://support.microsoft.com/en-us/help/3191847

Microsoft Excel Web App 2010 Service Pack 2
    https://support.microsoft.com/en-us/help/3101522

Microsoft Office 2007 Service Pack 3
    https://support.microsoft.com/en-us/help/3141529

Microsoft Office 2010 Service Pack 2 (32-bit editions)
    https://support.microsoft.com/en-us/help/3141538

Microsoft Office 2010 Service Pack 2 (64-bit editions)
    https://support.microsoft.com/en-us/help/3141538

Microsoft Office 2013 RT Service Pack 1
    https://support.microsoft.com/en-us/help/3178710

Microsoft Office 2013 Service Pack 1 (32-bit editions)
    https://support.microsoft.com/en-us/help/3178710

Microsoft Office 2013 Service Pack 1 (64-bit editions)
    https://support.microsoft.com/en-us/help/3178710

Microsoft Office 2016 (32-bit edition)
    https://support.microsoft.com/en-us/help/3178702
    https://support.microsoft.com/en-us/help/3178703

Microsoft Office 2016 (64-bit edition)
    https://support.microsoft.com/en-us/help/3178702
    https://support.microsoft.com/en-us/help/3178703

Microsoft Office Compatibility Pack Service Pack 2
    https://support.microsoft.com/en-us/help/3191830

Microsoft Office Web Apps 2010 Service Pack 2
    https://support.microsoft.com/en-us/help/3191845

Microsoft Office Web Apps Server 2013 Service Pack 1
    https://support.microsoft.com/en-us/help/3178725

Microsoft OneNote 2007 Service Pack 3
    https://support.microsoft.com/en-us/help/3191829

Microsoft OneNote 2010 Service Pack 2 (32-bit editions)
    https://support.microsoft.com/en-us/help/2589382

Microsoft OneNote 2010 Service Pack 2 (64-bit editions)
    https://support.microsoft.com/en-us/help/2589382

Microsoft Outlook 2007 Service Pack 3
    https://support.microsoft.com/en-us/help/3127890

Microsoft Outlook 2010 Service Pack 2 (32-bit editions)
    https://support.microsoft.com/en-us/help/3118388

Microsoft Outlook 2010 Service Pack 2 (64-bit editions)
    https://support.microsoft.com/en-us/help/3118388

Microsoft Outlook 2013 Service Pack 1 (32-bit editions)
    https://support.microsoft.com/en-us/help/3172519

Microsoft Outlook 2013 Service Pack 1 (64-bit editions)
    https://support.microsoft.com/en-us/help/3172519

Microsoft Outlook 2016 (32-bit edition)
    https://support.microsoft.com/en-us/help/3178664

Microsoft Outlook 2016 (64-bit edition)
    https://support.microsoft.com/en-us/help/3178664

Microsoft Outlook for Mac 2011
    https://support.microsoft.com/en-us/help/3212218

Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (32-bit)
    https://support.microsoft.com/en-us/help/4017094

Microsoft Silverlight 5 Developer Runtime when installed on Microsoft Windows (x64-based)
    https://support.microsoft.com/en-us/help/4017094

Microsoft Silverlight 5 when installed on Microsoft Windows (32-bit)
    https://support.microsoft.com/en-us/help/4017094

Microsoft Silverlight 5 when installed on Microsoft Windows (x64-based)
    https://support.microsoft.com/en-us/help/4017094

Mono Framework Version 4.8.1.0
    https://support.microsoft.com/en-us/help/4019460

Mono Framework Version 5.0.0.48
    https://support.microsoft.com/en-us/help/4019460

Office Online Server
    https://support.microsoft.com/en-us/help/3127895

Windows 10 for 32-bit Systems
    https://support.microsoft.com/en-us/help/4015221

Windows 10 for x64-based Systems
    https://support.microsoft.com/en-us/help/4015221

Windows 10 Version 1511 for 32-bit Systems
    https://support.microsoft.com/en-us/help/4015219

Windows 10 Version 1511 for x64-based Systems
    https://support.microsoft.com/en-us/help/4015219

Windows 10 Version 1607 for 32-bit Systems
    https://support.microsoft.com/en-us/help/4015217

Windows 10 Version 1607 for x64-based Systems
    https://support.microsoft.com/en-us/help/015217

Windows 10 Version 1703 for 32-bit Systems
    https://support.microsoft.com/en-us/help/4015583

Windows 10 Version 1703 for x64-based Systems
    https://support.microsoft.com/en-us/help/4015583

Windows 7 for 32-bit Systems Service Pack 1
    https://support.microsoft.com/en-us/help/4015549

Windows 7 for x64-based Systems Service Pack 1
    https://support.microsoft.com/en-us/help/4015549

Windows 8.1 for 32-bit systems
    https://support.microsoft.com/en-us/help/4015550

Windows 8.1 for x64-based systems
    https://support.microsoft.com/en-us/help/4015550

Windows RT 8.1
    https://support.microsoft.com/en-us/help/4015550

Windows Server 2008 for 32-bit Systems Service Pack 2
    https://support.microsoft.com/en-us/help/4014652
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383

Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation)
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383

Windows Server 2008 for Itanium-Based Systems Service Pack 2
    https://support.microsoft.com/en-us/help/4014652
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383

Windows Server 2008 for x64-based Systems Service Pack 2
    https://support.microsoft.com/en-us/help/3211308
    https://support.microsoft.com/en-us/help/3217841
    https://support.microsoft.com/en-us/help/4014652
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383

Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation)
    https://support.microsoft.com/en-us/help/3211308
    https://support.microsoft.com/en-us/help/3217841
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383

Windows Server 2008 R2 for Itanium-Based Systems Service Pack 1
    https://support.microsoft.com/en-us/help/4015549

Windows Server 2008 R2 for x64-based Systems Service Pack 1
    https://support.microsoft.com/en-us/help/4015549

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation)
    https://support.microsoft.com/en-us/help/4015549

Windows Server 2012
    https://support.microsoft.com/en-us/help/4015551

Windows Server 2012 (Server Core installation)
    https://support.microsoft.com/en-us/help/4015551

Windows Server 2012 R2
    https://support.microsoft.com/en-us/help/4015550

Windows Server 2012 R2 (Server Core installation)
    https://support.microsoft.com/en-us/help/4015550

Windows Server 2016
    https://support.microsoft.com/en-us/help/4015217

Windows Server 2016 (Server Core installation)
    https://support.microsoft.com/en-us/help/4015217

Windows Vista Service Pack 2
    https://support.microsoft.com/en-us/help/4014652
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383

Windows Vista x64 Edition Service Pack 2
    https://support.microsoft.com/en-us/help/4014652
    https://support.microsoft.com/en-us/help/4014793
    https://support.microsoft.com/en-us/help/4014794
    https://support.microsoft.com/en-us/help/4015067
    https://support.microsoft.com/en-us/help/4015068
    https://support.microsoft.com/en-us/help/4015195
    https://support.microsoft.com/en-us/help/4015380
    https://support.microsoft.com/en-us/help/4015383


Back to Advisories