2012 年 5 月：マイクロソフト　定例セキュリティ更新プログラム情報

Microsoft addresses the following vulnerabilities in its May batch of patches:

• (MS12-029) Vulnerability in Microsoft Word Could Allow Remote Code Execution (2680352)
  Risk Rating: Critical
  
  A vulnerability exists in the way affected versions of MS Office parse RTF data. An attacker could send a target a specially crafted RTF file to exploit this vulnerability. More information is found here.



• (MS12-030) Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (2663830)
  Risk Rating: Important
  
  This security update resolves a vulnerability found in the Windows Authenticode Signature Verification. The vulnerability exists in the way the said function verifies portable executable (PE) files. Read more here.



• (MS12-031) Vulnerability in Microsoft Visio Viewer 2010 Could Allow Remote Code Execution (2597981)
  Risk Rating: Important
  
  A vulnerability in the way MS Visio handles specially crafted files could allow an attacker to take control of the vulnerable system. Logged on users that have lesser privileges on the affected system are less impacted by the effects of this vulnerability. Read more here.



• (MS12-032) Vulnerability in TCP/IP Could Allow Elevation of Privilege (2688338)
  Risk Rating: Important
  
  This update resolves the two vulnerabilities in affected Windows versions. When exploited, the more critical of these vulnerabilities could allow an attacker to elevate his privileges on the affected computer. More information can be found here.



• (MS12-033) Vulnerability in Windows Partition Manager Could Allow Elevation of Privilege (2690533)
  Risk Rating: Important
  
  A vulnerability in the way Windows Partition Manager handles device relation requests could allow an attacker to run code on an affected system. When successfully exploited, the attacker can run programs or change data. Read more here.



• (MS12-034) Combined Security Update for Microsoft Office, Windows, .NET Framework, and Silverlight (2681578)
  Risk Rating: Critical
  
  This bulletin addresses a number of vulnerabilities reported for the Windows, MS Office, .NET Framework, and Silverlight. It replaces several earlier bulleltins issued for some vulnerabilities. Read more here.



• (MS12-035) Vulnerabilities in .NET Framework Could Allow Remote Code Execution (2693777)
  Risk Rating: Critical
  
  This update resolves vulnerabilities in some versions of the .NET Framework. When a vulnerable system accesses a specially crafted webpage via browser that runs XAML Browser Applications (XBAPs), the system may be exploited by an attacker to execute code remotely. Read more here.