2012 年 8 月：マイクロソフト　定例セキュリティ更新プログラム情報

Microsoft addresses the following vulnerabilities in its August batch of patches:

• (MS12-052) Cumulative Security Update for Internet Explorer (2722913)
  Risk Rating: Critical
  
  This bulletin patches four identified vulnerabilities that exist in version 6-9 of the Internet Explorer browser. Attackers looking to exploit these vulnerabilities lures users to open or view a specially crated webpage. Read more here.



• (MS12-053) Vulnerability in Remote Desktop Could Allow Remote Code Execution (2723135)
  Risk Rating: Critical
  
  Microsoft issues a patch that resolves a vulnerability found in the Remote Desktop Protocol (RDP) in Windows XP SP3 systems. The vulnerability exists in the way deleted objects are accessed by RDP. Read more here.



• (MS12-054) Vulnerabilities in Windows Networking Components Could Allow Remote Code Execution (2733594)
  Risk Rating: Critical
  
  This bulletin resolves four vulnerabilities that exist in the Windows networking components and print spooler. Exploitation of these vulnerabilities involves an attacker sending a specially crated response to a Windows print/networking request. Read more here.



• (MS12-055) Vulnerability in Windows Kernel-Mode Drivers Could Allow Elevation of Privilege (2731847)
  Risk Rating: Important
  
  This patch resolves an elevation of privilege vulnerability found in the handling of objects in memory done by the Windows kernel-mode driver. Read more here.



• (MS12-056) Vulnerability in JScript and VBScript Engines Could Allow Remote Code Execution (2706045)
  Risk Rating: Important
  
  This bulletin resolves a remote code execution vulnerability found in the scripting engines JScript and VBScript in Windows 64-bit systems. Read more here.



• (MS12-057) Vulnerability in Microsoft Office Could Allow Remote Code Execution (2731879)
  Risk Rating: Important
  
  Microsoft issues a patch that resolves a remote code execution vulnerability existing in several versions of MS Office. Read more here.



• (MS12-058) Vulnerabilities in Microsoft Exchange Server WebReady Document Viewing Could Allow Remote Code Execution (2740358)
  Risk Rating: Critical
  
  This patch resolves several vulnerabilities that are present in the Microsoft Exchange Server WebReady Document View feature. Attackers who are looking to exploit this vulnerability may send a specially crafted file that can be viewed by a user using the Outlook Web Access in a browser. Read more here.



• (MS12-059) Vulnerability in Microsoft Visio Could Allow Remote Code Execution (2733918)
  Risk Rating: Important
  
  Microsoft issues a patch for a remote code execution vulnerability that exists in the way certain versions of MS Visio parses specially crafted files. Read more here.



• (MS12-060) Vulnerability in Windows Common Controls Could Allow Remote Code Execution (2720573)
  Risk Rating: Critical
  
  This update resolves a vulnerability in MSCOMCTL.OCX, which is found in a host of Microsoft products. When successfully exploited, the vulnerability allows an attacker to remotely execute any code on the vulnerable system. Read more here.