-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
                         AUSCERT Security Bulletin

                              ASB-2018.0004.2
             Microsoft Security Updates for Internet Explorer
                              5 January 2018

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              Microsoft Internet Explorer
Operating System:     Windows
Impact/Access:        Execute Arbitrary Code/Commands -- Remote with User Interaction
                      Access Confidential Data        -- Remote with User Interaction
Resolution:           Patch/Upgrade
CVE Names:            CVE-2018-0772 CVE-2018-0762 
Member content until: Saturday, February  3 2018

Revision History:     January 5 2018: Added Windows as the Operating System
                      January 4 2018: Initial Release

OVERVIEW

        Microsoft has released its monthly security patch update for the 
        month of January 2018.
        
        This update resolves 3 vulnerabilities across the following 
        products: [1]
        
         Internet Explorer 10 
         Internet Explorer 11 
         Internet Explorer 9


IMPACT

        Microsoft has given the following details regarding these 
        vulnerabilities. [1]
        
         Details         Impact                   Severity
         ADV180002       Information Disclosure   Important
         CVE-2018-0762   Remote Code Execution    Critical
         CVE-2018-0772   Remote Code Execution    Critical


MITIGATION

        Microsoft recommends updating the software with the version made 
        available on the Microsoft Update Cataloge for the following 
        Knowledge Base articles. [1].
        
         KB4056893, KB4056892, KB4056891, KB4056890, KB4056888 KB4056568


REFERENCES

        [1] Security Update Guide
            https://portal.msrc.microsoft.com/en-us/security-guidance

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours 
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iQIVAwUBWk6y84x+lLeg9Ub1AQg1aBAAo5H2e82da+a8BsIFhlkgJyCJ9q0kuN1i
9UoDPYOKkrz2N3CScjaaZp3QddKElIgBtgzrTZAL8aApI3GEsJ8UP6rB1Kah6p+/
y0DkQuiB3oNlej+0b6AwGRkUhaY5cqEczzsWfmsPhBoJX/O7CTWFUYMm7t4H9WVE
Kb4P1oeivEBybI7qgok7aPdjMLvbyLMHgzwcD9IbrK7Y5uuMWh0L7COJmDJb2iQg
pMSSR9rGLi49bGAL0Vw2IGQIVofWdz3ttOGnDTvXhnSu5JvmVVVcvBd751nCzVXm
cMJ8Njg6MBsatotDCwge7T0iKFbniJHycbDo1TCyD+mafs783J7qcJtQHvF33nlh
HU7qgIlak2BdL5s6SMG+a0O1L0vdxzAxlJuPunE9kXAkQY+LWPS0MqywP480zvQX
SFwMjBfwX+b1tzjHZ47pmeV/dXnK9u9aAayvsICQE1ExLEGkNSQQakU0rM0oxhF1
2IGf3SoczvGfnNRQy0gznnAU584d9DLS7Xri9df10f8yNMW/wjgyH50tApZ2zI9f
aH9wM2nXYQiSf9F0c+OGJd9PdqgROn+mAWzrrnMo0/Sg07VvG3SMvC9ypjFfXVeS
72/3Luk/8DHZ/oMaac7NgZKVe6fseF7fFqz3vgRge35jB7POjm/BrQpw351xvLq8
pinbvY+bM6U=
=3JuC
-----END PGP SIGNATURE-----