Microsoft Security Bulletin Coverage (Jan 10, 2017)

By

SonicWall has analyzed and addressed Microsoft’s security advisories for the month of January, 2017. A list of issues reported, along with SonicWall coverage information are as follows:

MS17-001 Security Update for Microsoft Edge

  • CVE-2017-0002 Microsoft Edge Elevation of Privilege Vulnerability
    There are no known exploits in the wild.

MS17-002 Security Update for Microsoft Office

  • CVE-2017-0003 Microsoft Office Memory Corruption Vulnerability
    There are no known exploits in the wild.

MS17-003 Security Update for Adobe Flash Player

  • CVE-2017-2925 Adobe Flash Player Vulnerability
    There are no known exploits in the wild.
  • CVE-2017-2926 Adobe Flash Player Vulnerability
    ASPY:1270 “Malformed-File swf.MP.533”
  • CVE-2017-2927 Adobe Flash Player Vulnerability
    ASPY:1271 “Malformed-File swf.MP.534”
  • CVE-2017-2928 Adobe Flash Player Vulnerability
    ASPY:1272 “Malformed-File swf.MP.524_2”
  • CVE-2017-2930 Adobe Flash Player Vulnerability
    ASPY:1274 “Malformed-File swf.MP.525_2”
  • CVE-2017-2931 Adobe Flash Player Vulnerability
    ASPY:1275 “Malformed-File swf.MP.526_2”
  • CVE-2017-2932 Adobe Flash Player Vulnerability
    ASPY:1276 “Malformed-File swf.MP.527_2”
  • CVE-2017-2933 Adobe Flash Player Vulnerability
    ASPY:1277 “Malformed-File swf.MP.528_2”
  • CVE-2017-2934 Adobe Flash Player Vulnerability
    ASPY:1278 “Malformed-File swf.MP.529_2”
  • CVE-2017-2935 Adobe Flash Player Vulnerability
    ASPY:1279 “Malformed-File swf.MP.530_2”
  • CVE-2017-2936 Adobe Flash Player Vulnerability
    ASPY:1280 “Malformed-File swf.MP.531”
  • CVE-2017-2937 Adobe Flash Player Vulnerability
    ASPY:1281 “Malformed-File swf.MP.532”

MS17-004 Security Update for Local Security Authority Subsystem Service

  • CVE-2017-0004 Local Security Authority Subsystem Service Denial of Service Vulnerability
    IPS:12571 “LSASS DoS Vulnerability (MS17-004)”
Security News
The SonicWall Capture Labs Threat Research Team gathers, analyzes and vets cross-vector threat information from the SonicWall Capture Threat network, consisting of global devices and resources, including more than 1 million security sensors in nearly 200 countries and territories. The research team identifies, analyzes, and mitigates critical vulnerabilities and malware daily through in-depth research, which drives protection for all SonicWall customers. In addition to safeguarding networks globally, the research team supports the larger threat intelligence community by releasing weekly deep technical analyses of the most critical threats to small businesses, providing critical knowledge that defenders need to protect their networks.