Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT Security Bulletin
ASB-2018.0004.2
Microsoft Security Updates for Internet Explorer
5 January 2018
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Microsoft Internet Explorer
Operating System: Windows
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Access Confidential Data -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2018-0772 CVE-2018-0762
Member content until: Saturday, February 3 2018
Revision History: January 5 2018: Added Windows as the Operating System
January 4 2018: Initial Release
OVERVIEW
Microsoft has released its monthly security patch update for the
month of January 2018.
This update resolves 3 vulnerabilities across the following
products: [1]
Internet Explorer 10
Internet Explorer 11
Internet Explorer 9
IMPACT
Microsoft has given the following details regarding these
vulnerabilities. [1]
Details Impact Severity
ADV180002 Information Disclosure Important
CVE-2018-0762 Remote Code Execution Critical
CVE-2018-0772 Remote Code Execution Critical
MITIGATION
Microsoft recommends updating the software with the version made
available on the Microsoft Update Cataloge for the following
Knowledge Base articles. [1].
KB4056893, KB4056892, KB4056891, KB4056890, KB4056888 KB4056568
REFERENCES
[1] Security Update Guide
https://portal.msrc.microsoft.com/en-us/security-guidance
AusCERT has made every effort to ensure that the information contained
in this document is accurate. However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQIVAwUBWk6y84x+lLeg9Ub1AQg1aBAAo5H2e82da+a8BsIFhlkgJyCJ9q0kuN1i
9UoDPYOKkrz2N3CScjaaZp3QddKElIgBtgzrTZAL8aApI3GEsJ8UP6rB1Kah6p+/
y0DkQuiB3oNlej+0b6AwGRkUhaY5cqEczzsWfmsPhBoJX/O7CTWFUYMm7t4H9WVE
Kb4P1oeivEBybI7qgok7aPdjMLvbyLMHgzwcD9IbrK7Y5uuMWh0L7COJmDJb2iQg
pMSSR9rGLi49bGAL0Vw2IGQIVofWdz3ttOGnDTvXhnSu5JvmVVVcvBd751nCzVXm
cMJ8Njg6MBsatotDCwge7T0iKFbniJHycbDo1TCyD+mafs783J7qcJtQHvF33nlh
HU7qgIlak2BdL5s6SMG+a0O1L0vdxzAxlJuPunE9kXAkQY+LWPS0MqywP480zvQX
SFwMjBfwX+b1tzjHZ47pmeV/dXnK9u9aAayvsICQE1ExLEGkNSQQakU0rM0oxhF1
2IGf3SoczvGfnNRQy0gznnAU584d9DLS7Xri9df10f8yNMW/wjgyH50tApZ2zI9f
aH9wM2nXYQiSf9F0c+OGJd9PdqgROn+mAWzrrnMo0/Sg07VvG3SMvC9ypjFfXVeS
72/3Luk/8DHZ/oMaac7NgZKVe6fseF7fFqz3vgRge35jB7POjm/BrQpw351xvLq8
pinbvY+bM6U=
=3JuC
-----END PGP SIGNATURE-----