{"id":1156,"date":"2018-02-19T08:41:26","date_gmt":"2018-02-19T13:41:26","guid":{"rendered":"https:\/\/cert.pa\/?p=1156"},"modified":"2018-02-19T08:42:19","modified_gmt":"2018-02-19T13:42:19","slug":"csirt-panama-aviso-2018-02-19-microsoft-libera-actualizaciones-para-50-vulnerabilidades","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=1156","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2018-02-19 Microsoft libera actualizaciones para 50 vulnerabilidades"},"content":{"rendered":"

CSIRT Panam\u00e1 Aviso 2018-02-19 Microsoft libera actualizaciones para 50 vulnerabilidades
\nGravedad: Alta
\nFecha de publicaci\u00f3n: Febrero 19, 2018
\nFecha de modificaci\u00f3n: Febrero 13, 2018
\n\u00daltima revisi\u00f3n: Revisi\u00f3n Browsers.
\nhttps:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance
\nSistemas Afectados:
\nSide-Channel
\nAdobe Flash Player
\nCommon Log File System Driver
\nDevice Guard
\nGraphic Fonts
\nInternet Explorer
\nMicrosoft Browsers
\nMicrosoft Edge
\nMicrosoft Office
\nMicrosoft Scripting Engine
\nMicrosoft Windows
\nWindows Kernel
\nWindows SMB Server<\/p>\n

I. Descripci\u00f3n
\nMicrosoft ha liberado actualizaciones que cubren 50 vulnerabilidades.<\/p>\n

II. Impacto
\nEstas correcciones o parches estan detalladas en la tabla a continuacion<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Tag<\/th>\nCVE ID<\/th>\nCVE Title<\/th>\n<\/tr>\n
Side-Channel<\/td>\nADV180002<\/a><\/td>\nGuidance to mitigate speculative execution side-channel vulnerabilities<\/td>\n<\/tr>\n
Adobe Flash Player<\/td>\nADV180004<\/a><\/td>\nFebruary 2018 Adobe Flash Security Update<\/td>\n<\/tr>\n
Common Log File System Driver<\/td>\nCVE-2018-0844<\/a><\/td>\nWindows Common Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Common Log File System Driver<\/td>\nCVE-2018-0846<\/a><\/td>\nWindows Common Log File System Driver Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Device Guard<\/td>\nCVE-2018-0827<\/a><\/td>\nWindows Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
Graphic Fonts<\/td>\nCVE-2018-0855<\/a><\/td>\nWindows EOT Font Engine Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Graphic Fonts<\/td>\nCVE-2018-0755<\/a><\/td>\nWindows EOT Font Engine Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Graphic Fonts<\/td>\nCVE-2018-0760<\/a><\/td>\nWindows EOT Font Engine Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Graphic Fonts<\/td>\nCVE-2018-0761<\/a><\/td>\nWindows EOT Font Engine Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Internet Explorer<\/td>\nCVE-2018-0866<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Browsers<\/td>\nCVE-2018-0840<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Edge<\/td>\nCVE-2018-0839<\/a><\/td>\nMicrosoft Edge Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Edge<\/td>\nCVE-2018-0771<\/a><\/td>\nMicrosoft Edge Security Feature Bypass Vulnerability<\/td>\n<\/tr>\n
Microsoft Edge<\/td>\nCVE-2018-0763<\/a><\/td>\nMicrosoft Edge Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0869<\/a><\/td>\nMicrosoft SharePoint Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0864<\/a><\/td>\nMicrosoft SharePoint Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0852<\/a><\/td>\nMicrosoft Outlook Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0851<\/a><\/td>\nMicrosoft Office Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0850<\/a><\/td>\nMicrosoft Outlook Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0853<\/a><\/td>\nMicrosoft Office Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-0841<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0859<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0860<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0861<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0858<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0836<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0835<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0837<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0838<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0856<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0857<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-0834<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0822<\/a><\/td>\nWindows NTFS Global Reparse Point Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0823<\/a><\/td>\nNamed Pipe File System Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0825<\/a><\/td>\nStructuredQuery Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0828<\/a><\/td>\nWindows Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0826<\/a><\/td>\nWindows Storage Services Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0821<\/a><\/td>\nWindows AppContainer Elevation Of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0847<\/a><\/td>\nWindows Scripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-0820<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0831<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0832<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0830<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0829<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0757<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0742<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0756<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0809<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0810<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0843<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-0842<\/a><\/td>\nWindows Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Windows SMB Server<\/td>\nCVE-2018-0833<\/a><\/td>\nWindows Denial of Service Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

III. Referencia a soluciones, herramientas e informaci\u00f3n<\/p>\n

Se recomienda actualizar Windows utilizando la herramienta de Windows update o WSUS para Windows server.
\nhttps:\/\/www.microsoft.com\/en-us\/security\/pc-security\/malware-removal.aspx
\nInstale los parches tan pronto como est\u00e9n disponibles.
\nEjecute todo el software con los menos privilegios requeridos mientras se mantiene la funcionalidad.
\nPara mas referencias seguir el siguiente enlace https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance<\/p>\n

IV. Informaci\u00f3n de contacto
\nCSIRT PANAMA
\nComputer Security Incident Response Team Autoridad Nacional para la
\nInnovacion Gubernamental
\nE-Mail: info@cert.pa
\nPhone: +507 520-CERT (2378)
\nWeb: https:\/\/cert.pa
\nTwitter: @CSIRTPanama
\nFacebook: http:\/\/www.facebook.com\/CSIRTPanama
\nKey ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"

CSIRT Panam\u00e1 Aviso 2018-02-19 Microsoft libera actualizaciones para 50 vulnerabilidades Gravedad: Alta Fecha de publicaci\u00f3n: Febrero 19, 2018 Fecha de modificaci\u00f3n: Febrero 13, 2018 \u00daltima revisi\u00f3n: Revisi\u00f3n Browsers. https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance Sistemas Afectados: Side-Channel Adobe Flash Player…<\/p>\n","protected":false},"author":5,"featured_media":414,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[76,8,72,21,9,73,64,80,68,45,94],"class_list":["post-1156","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad","tag-actualizaciones","tag-avisos","tag-avisos-de-seguridad","tag-internet-explorer","tag-microsoft","tag-parches","tag-seguridad","tag-vulnerabilidad","tag-vulnerabilidades","tag-windows","tag-windows-update"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1156","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1156"}],"version-history":[{"count":2,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1156\/revisions"}],"predecessor-version":[{"id":1158,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1156\/revisions\/1158"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/414"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1156"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1156"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1156"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}