{"id":1309,"date":"2018-12-14T11:08:17","date_gmt":"2018-12-14T16:08:17","guid":{"rendered":"https:\/\/cert.pa\/?p=1309"},"modified":"2018-12-14T11:08:17","modified_gmt":"2018-12-14T16:08:17","slug":"csirt-panama-aviso-2018-14-12-microsoft-publica-actualizaciones-de-seguridad","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=1309","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2018-14-12 Microsoft publica actualizaciones de seguridad."},"content":{"rendered":"

CSIRT Panam\u00e1 Aviso 2018-14-12 Microsoft publica actualizaciones de seguridad.
\nGravedad: Alta
\nFecha de publicaci\u00f3n: Diciembre 14, 2018
\n\u00daltima revisi\u00f3n: Diciembre 14, 2018
\nhttps:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/releasenotedetail\/6c54acc6-2ed2-e811-a980-000d3a33a34d<\/p>\n

Sistemas Afectados:
\nAdobe Flash Player
\nInternet Explorer
\nMicrosoft Edge
\nMicrosoft Windows
\nMicrosoft Office and Microsoft Office Services and Web Apps
\nChakraCore
\n.NET Framework
\nMicrosoft Dynamics NAV
\nMicrosoft Exchange Server
\nMicrosoft Visual Studio
\nWindows Azure Pack (WAP)<\/p>\n

I. Descripci\u00f3n<\/p>\n

El bolet\u00edn de seguridad consiste en actualizaciones para los siguientes software:<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
Tag<\/th>\nCVE ID<\/th>\nCVE Title<\/th>\n<\/tr>\n
.NET Framework<\/td>\nCVE-2018-8517<\/a><\/td>\n.NET Framework Denial Of Service Vulnerability<\/td>\n<\/tr>\n
.NET Framework<\/td>\nCVE-2018-8540<\/a><\/td>\n.NET Framework Remote Code Injection Vulnerability<\/td>\n<\/tr>\n
Adobe Flash Player<\/td>\nADV180031<\/a><\/td>\nDecember 2018 Adobe Flash Security Update<\/td>\n<\/tr>\n
Internet Explorer<\/td>\nCVE-2018-8619<\/a><\/td>\nInternet Explorer Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Internet Explorer<\/td>\nCVE-2018-8631<\/a><\/td>\nInternet Explorer Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Dynamics<\/td>\nCVE-2018-8651<\/a><\/td>\nMicrosoft Dynamics NAV Cross Site Scripting Vulnerability<\/td>\n<\/tr>\n
Microsoft Exchange Server<\/td>\nCVE-2018-8604<\/a><\/td>\nMicrosoft Exchange Server Tampering Vulnerability<\/td>\n<\/tr>\n
Microsoft Graphics Component<\/td>\nCVE-2018-8639<\/a><\/td>\nWin32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Graphics Component<\/td>\nCVE-2018-8638<\/a><\/td>\nDirectX Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Graphics Component<\/td>\nCVE-2018-8595<\/a><\/td>\nWindows GDI Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Graphics Component<\/td>\nCVE-2018-8596<\/a><\/td>\nWindows GDI Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-8628<\/a><\/td>\nMicrosoft PowerPoint Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-8636<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-8627<\/a><\/td>\nMicrosoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-8598<\/a><\/td>\nMicrosoft Excel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-8587<\/a><\/td>\nMicrosoft Outlook Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Office<\/td>\nCVE-2018-8597<\/a><\/td>\nMicrosoft Excel Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Office SharePoint<\/td>\nCVE-2018-8635<\/a><\/td>\nMicrosoft SharePoint Server Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Microsoft Office SharePoint<\/td>\nCVE-2018-8580<\/a><\/td>\nMicrosoft SharePoint Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8629<\/a><\/td>\nChakra Scripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8643<\/a><\/td>\nScripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8625<\/a><\/td>\nWindows VBScript Engine Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8617<\/a><\/td>\nChakra Scripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8583<\/a><\/td>\nChakra Scripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8618<\/a><\/td>\nChakra Scripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Scripting Engine<\/td>\nCVE-2018-8624<\/a><\/td>\nChakra Scripting Engine Memory Corruption Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows<\/td>\nCVE-2018-8649<\/a><\/td>\nWindows Denial of Service Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows DNS<\/td>\nCVE-2018-8514<\/a><\/td>\nRemote Procedure Call runtime Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Microsoft Windows DNS<\/td>\nCVE-2018-8626<\/a><\/td>\nWindows DNS Server Heap Overflow Vulnerability<\/td>\n<\/tr>\n
Visual Studio<\/td>\nCVE-2018-8599<\/a><\/td>\nDiagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Authentication Methods<\/td>\nCVE-2018-8634<\/a><\/td>\nMicrosoft Text-To-Speech Remote Code Execution Vulnerability<\/td>\n<\/tr>\n
Windows Azure Pack<\/td>\nCVE-2018-8652<\/a><\/td>\nWindows Azure Pack Cross Site Scripting Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-8477<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-8621<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-8612<\/a><\/td>\nConnected User Experiences and Telemetry Service Denial of Service Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-8611<\/a><\/td>\nWindows Kernel Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-8622<\/a><\/td>\nWindows Kernel Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel<\/td>\nCVE-2018-8637<\/a><\/td>\nWin32k Information Disclosure Vulnerability<\/td>\n<\/tr>\n
Windows Kernel-Mode Drivers<\/td>\nCVE-2018-8641<\/a><\/td>\nWin32k Elevation of Privilege Vulnerability<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

II. Referencia a soluciones, herramientas e informaci\u00f3n<\/p>\n

Se recomienda actualizar los equipos utilizando windows update.<\/p>\n

III. Informaci\u00f3n de contacto
\nCSIRT PANAMA
\nComputer Security Incident Response Team Autoridad Nacional para la Innovacion Gubernamental
\nE-Mail: info@cert.pa
\nPhone: +507 520-CERT (2378)
\nWeb: https:\/\/cert.pa
\nTwitter: @CSIRTPanama
\nFacebook: http:\/\/www.facebook.com\/CSIRTPanama
\nKey ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"

CSIRT Panam\u00e1 Aviso 2018-14-12 Microsoft publica actualizaciones de seguridad. Gravedad: Alta Fecha de publicaci\u00f3n: Diciembre 14, 2018 \u00daltima revisi\u00f3n: Diciembre 14, 2018 https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/releasenotedetail\/6c54acc6-2ed2-e811-a980-000d3a33a34d Sistemas Afectados: Adobe Flash Player Internet Explorer Microsoft Edge Microsoft Windows Microsoft…<\/p>\n","protected":false},"author":5,"featured_media":414,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-1309","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1309"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1309\/revisions"}],"predecessor-version":[{"id":1310,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/1309\/revisions\/1310"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/414"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}