Microsoft Security Bulletin Coverage for May 2017
SonicWall has analyzed and addressed Microsoft’s security advisories for the month of May, 2017. A list of issues reported, along with SonicWall coverage information are as follows:
Microsoft Coverage
- CVE-2017-0064 Internet Explorer Security Feature Bypass Vulnerability
IPS:12779 Internet Explorer Security Feature Bypass Vulnerability (May 17) - CCVE-2017-0077 Win32k Information Disclosure Vulnerability
SPY:1462 Malformed-File exe.MP.32 - CVE-2017-0171 Windows DNS Server Denial of Service Vulnerability
IPS:12777 Windows DNS Server Denial of Service Vulnerability (May 17) - CVE-2017-0175 Windows Kernel Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0190 Windows GDI Denial of Service Vulnerability
There are no known exploits in the wild. - CVE-2017-0212 Windows Hyper-V vSMB Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0213 Windows COM Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0214 Windows COM Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0220 Windows COM Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0221 Microsoft Edge Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0222 Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0224 Scripting Engine Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0226 Microsoft Internet Explorer Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0227 Microsoft Edge Memory Corruption Vulnerability
IPS:12778 Microsoft Edge Memory Corruption Vulnerability (MAY 17) 1 - CVE-2017-0228 Scripting Engine Memory Corruption Vulnerability
IPS:12780 Scripting Engine Memory Corruption Vulnerability (MAY 17) 1 - CVE-2017-0229 Scripting Engine Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0230 Scripting Engine Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0231 Microsoft Browser Spoofing Vulnerability
There are no known exploits in the wild. - CVE-2017-0233 Microsoft Edge Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0234 Scripting Engine Memory Corruption Vulnerability
IPS:12782 Scripting Engine Memory Corruption Vulnerability (MAY 17) 2 - CVE-2017-0235 Scripting Engine Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0236 Scripting Engine Memory Corruption Vulnerability
IPS:12783 Scripting Engine Memory Corruption Vulnerability (MAY 17) 3 - CVE-2017-0238 Scripting Engine Memory Corruption Vulnerability
IPS:12784 Scripting Engine Memory Corruption Vulnerability (MAY 17) 4 - CVE-2017-0240 Microsoft Edge Memory Corruption Vulnerability
IPS:12785 Microsoft Edge Memory Corruption Vulnerability (MAY 17) 2 - CVE-2017-0241 Microsoft Edge Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0242 Microsoft ActiveX Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0243 Office Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0244 Windows Kernel Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0245 Win32k Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0246 Win32k Elevation of Privilege Vulnerability
SPY:1466 Malformed-File exe.MP.33 - CVE-2017-0248 .Net Security Feature Bypass Vulnerability
There are no known exploits in the wild. - CVE-2017-0254 Microsoft Office Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0255 Microsoft SharePoint XSS Vulnerability
There are no known exploits in the wild. - CVE-2017-0258 Windows Kernel Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0259 Windows Kernel Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0261 Microsoft Office Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0262 Microsoft Office Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0263 Win32k Elevation of Privilege Vulnerability
There are no known exploits in the wild. - CVE-2017-0264 Microsoft Office Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0265 Microsoft Office Memory Corruption Vulnerability
There are no known exploits in the wild. - CVE-2017-0266 Microsoft Edge Remote Code Execution Vulnerability
IPS:12781 Microsoft Edge Remote Code Execution Vulnerability (May 17) 1 - CVE-2017-0267 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0268 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0269 Windows SMB Denial of Service Vulnerability
There are no known exploits in the wild. - CVE-2017-0270 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0271 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0272 Windows SMB Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0273 Windows SMB Denial of Service Vulnerability
There are no known exploits in the wild. - CVE-2017-0274 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0275 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0276 Windows SMB Information Disclosure Vulnerability
There are no known exploits in the wild. - CVE-2017-0277 Windows SMB Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0278 Windows SMB Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0279 Windows SMB Remote Code Execution Vulnerability
There are no known exploits in the wild. - CVE-2017-0280 Windows SMB Deni
al of Service Vulnerability
There are no known exploits in the wild. - CVE-2017-0281 Microsoft Office Remote Code Execution Vulnerability
There are no known exploits in the wild.
Adobe Coverage
APSB17-15 Security updates for Adobe Flash Player:
- CVE-2017-3071 Adobe Flash Player Use After Free Vulnerability
Spy:1471 Malformed-File swf.MP.558 - CVE-2017-3068 Adobe Flash Player Memory Corruption Vulnerability
Spy:1475 Malformed-File flv.MP.1 - CVE-2017-3069 Adobe Flash Player Memory Corruption Vulnerability
Spy:1469 Malformed-File swf.MP.556 - CVE-2017-3070 Adobe Flash Player Memory Corruption Vulnerability
Spy:1470 Malformed-File swf.MP.557 - CVE-2017-3072 Adobe Flash Player Memory Corruption Vulnerability
Spy:1472 Malformed-File swf.MP.559 - CVE-2017-3073 Adobe Flash Player Memory Corruption Vulnerability
Spy:1473 Malformed-File swf.MP.560 - CVE-2017-3074 Adobe Flash Player Memory Corruption Vulnerability
Spy:1474 Malformed-File swf.MP.561
The SonicWall Capture Labs Threat Research Team gathers, analyzes and vets cross-vector threat information from the SonicWall Capture Threat network, consisting of global devices and resources, including more than 1 million security sensors in nearly 200 countries and territories. The research team identifies, analyzes, and mitigates critical vulnerabilities and malware daily through in-depth research, which drives protection for all SonicWall customers. In addition to safeguarding networks globally, the research team supports the larger threat intelligence community by releasing weekly deep technical analyses of the most critical threats to small businesses, providing critical knowledge that defenders need to protect their networks.
