I. Overview
Microsoft has released July 2017 Security Updates. This contains updates
that are rated as "critical". Remote attackers leveraging these
vulnerabilities may be able to execute arbitrary code.

Details on the vulnerabilities can be found at the following URL:

    July 2017 Security Updates 
    https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/f2b16606-4945-e711-80dc-000d3a32fc99

[Vulnerabilities addressed (Including Security Update Programs rated as "critical")]
* Listing up Microsoft Knowledge Base (KB) that are rated as "critical"

    ADV170009
    July Flash Security Update
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170009
    - KB4025376

    CVE-2017-8463
    Windows Explorer Remote Code Execution Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8463
    - KB4025331, KB4025333, KB4025336, KB4025337, KB4025338, KB4025339,
      KB4025341, KB4025342, KB4025343, KB4025344, KB4025497

    CVE-2017-8584
    HoloLens Remote Code Execution Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8584
    - KB4025339

    CVE-2017-8589
    Windows Search Remote Code Execution Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8589
    - KB4025331, KB4025333, KB4025336, KB4025337, KB4025338, KB4025339,
      KB4025341, KB4025342, KB4025343, KB4025344, KB4032955

    CVE-2017-8594
    Internet Explorer Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8594
    - KB4025252, KB4025336

    CVE-2017-8595
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8595
    - KB4025338, KB4025339, KB4025344

    CVE-2017-8596
    Microsoft Edge Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8596
    -KB4025339, KB4025342

    CVE-2017-8598
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8598
    - KB4025339, KB4025342, KB4025344

    CVE-2017-8601
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8601
    - KB4025338, KB4025339, KB4025342, KB4025344

    CVE-2017-8603
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8603
    - KB4025339, KB4025342, KB4025344

    CVE-2017-8604
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8604
    - KB4025339, KB4025342, KB4025344

    CVE-2017-8605
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8605
    - KB4025338, KB4025339, KB4025342, KB4025344

    CVE-2017-8606
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8606
    - KB4025252, KB4025336, KB4025338, KB4025339, KB4025342, KB4025344

    CVE-2017-8607
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8607
    - KB4025252, KB4025336, KB4025338, KB4025339, KB4025342, KB4025344

    CVE-2017-8608
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8608
    - KB4025252, KB4025336, KB4025338, KB4025339, KB4025342, KB4025344

    CVE-2017-8609
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8609
    - KB4025338, KB4025339, KB4025342, KB4025344

    CVE-2017-8610
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8610
    - KB4025342
    
    CVE-2017-8617
    Microsoft Edge Remote Code Execution Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8617
    - KB4025342

    CVE-2017-8618
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8618
    - KB4025252, KB4025336, KB4025338, KB4025339, KB4025341, KB4025342,
      KB4025344

    CVE-2017-8619
    Scripting Engine Memory Corruption Vulnerability
    https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8619
    - KB4025338, KB4025339, KB4025342, KB4025344

According to Microsoft, attacks leveraging the vulnerabilities have not
been observed in the wild, but please apply the security update programs
as soon as possible.


II. Solution
Please apply the security update programs through Microsoft Update,
Windows Update, etc. as soon as possible.

    Microsoft Update
    http://www.update.microsoft.com/

    Windows Update
    http://windowsupdate.microsoft.com/

    Microsoft Update Catalog
    https://catalog.update.microsoft.com/


III. References
    Microsoft Corporation
    July 2017 Security Updates 
    https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/f2b16606-4945-e711-80dc-000d3a32fc99

    Microsoft Corporation
    Microsoft Security Updates for July 2017 (Monthly) (Japanese)
    https://blogs.technet.microsoft.com/jpsecurity/2017/07/12/201707-security-bulletin/

    Microsoft Corporation
    Windows Update: FAQ
    https://support.microsoft.com/en-us/help/12373/windows-update-faq

    Adobe Systems Incorporated
    Security updates available for Flash Player | APSB17-21
    https://helpx.adobe.com/security/products/flash-player/apsb17-21.html
블로그 이미지

Ryansecurity

널리 이롭게 하자 [홍익 인간]

,