2013年1月10日木曜日

478・1/9はUpDateの日

今月は、9日(水)です。

自動アップデートになっていない人は、必ず手動でアップデートしましょう!





















------------------------------------------------------------
 ■ 緊急
------------------------------------------------------------
MS13-001 Windows 印刷スプーラー コンポーネントの脆弱性により、リモートでコードが実行される (2769369)

  - 影響を受けるソフトウェア:
    - Windows 7 for 32-bit Systems および
      Windows 7 for 32-bit Systems Service Pack 1
    - Windows 7 for x64-based Systems および
      Windows 7 for x64-based Systems Service Pack 1
    - Windows Server 2008 R2 for x64-based Systems および
      Windows Server 2008 R2 for x64-based Systems Service Pack 1
      (Windows Server 2008 R2 Server Core インストールは影響を受けます)
    - Windows Server 2008 R2 for Itanium-based Systems および
      Windows Server 2008 R2 for Itanium-based Systems Service
      Pack 1
  - 脆弱性の影響 : リモートでコードが実行される

MS13-002 XML コアサービスの脆弱性により、リモートでコードが実行される (2756145)

  - 影響を受けるソフトウェア:
    - Windows XP Service Pack 3
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows XP Professional x64 Edition Service Pack 2
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2003 Service Pack 2
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2003 x64 Edition Service Pack 2
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2003 with SP2 for Itanium-based Systems
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Vista Service Pack 2
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Vista x64 Edition Service Pack 2
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けません)
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けます)
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2008 for Itanium-based Systems Service Pack 2
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows 7 for 32-bit Systems および
      Windows 7 for 32-bit Systems Service Pack 1
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows 7 for x64-based Systems および
      Windows 7 for x64-based Systems Service Pack 1
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2008 R2 for x64-based Systems および
      Windows Server 2008 R2 for x64-based Systems Service Pack 1
      (Windows Server 2008 R2 Server Core インストールは影響を受けます)
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2008 R2 for Itanium-based Systems および
      Windows Server 2008 R2 for Itanium-based Systems Service
      Pack 1
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows 8 for 32-bit Systems
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows 8 for 64-bit Systems
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows Server 2012
      (Windows Server 2012 Server Core インストールは影響を受けます)
      - Microsoft XML Core Services 3.0
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Windows RT
      - Microsoft XML Core Services 4.0
      - Microsoft XML Core Services 6.0
    - Microsoft Office 2003 Service Pack 3
      - Microsoft XML Core Services 5.0
    - Microsoft Office 2007 Service Pack 2 および Microsoft Office
      2007 Service Pack 3
      - Microsoft XML Core Services 5.0
    - Microsoft Word Viewer
      - Microsoft XML Core Services 5.0
    - Microsoft Office 互換機能パック Service Pack 2 および
      Microsoft Office 互換機能パック Service Pack 3
      - Microsoft XML Core Services 5.0
    - Microsoft Expression Web Service Pack 1
      - Microsoft XML Core Services 5.0
    - Microsoft Expression Web 2
      - Microsoft XML Core Services 5.0
    - Microsoft SharePoint Server 2007 Service Pack 2
      (32 ビット版)
      - Microsoft XML Core Services 5.0
    - Microsoft SharePoint Server 2007 Service Pack 2
      (64 ビット版)
      - Microsoft XML Core Services 5.0
    - Microsoft SharePoint Server 2007 Service Pack 3
      (32 ビット版)
      - Microsoft XML Core Services 5.0
    - Microsoft SharePoint Server 2007 Service Pack 3
      (64 ビット版)
      - Microsoft XML Core Services 5.0
    - Microsoft Groove Server 2007 Service Pack 2
      - Microsoft XML Core Services 5.0
    - Microsoft Groove Server 2007 Service Pack 3
      - Microsoft XML Core Services 5.0
  - 脆弱性の影響 : リモートでコードが実行される

------------------------------------------------------------
 ■ 重要
------------------------------------------------------------
MS13-003 System Center Operations Manager の脆弱性により、特権が昇格される (2748552)

  - 影響を受けるソフトウェア:
    - Microsoft System Center Operations Manager 2007
      Service Pack 1
    - Microsoft System Center Operations Manager 2007 R2
  - 脆弱性の影響 : 特権の昇格

MS13-004 .NET Framework の脆弱性により、特権が昇格される (2769324)

  - 影響を受けるソフトウェア:
    - Windows XP Service Pack 3
      - Microsoft .NET Framework 1.0 Service Pack 3
        (Media Center Edition 2005 Service Pack 3 および Tablet
        PC Edition 2005 Service Pack 3 only)
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
    - Windows XP Professional x64 Edition Service Pack 2
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
    - Windows Server 2003 Service Pack 2
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
    - Windows Server 2003 x64 Edition Service Pack 2
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
    - Windows Server 2003 with SP2 for Itanium-based Systems
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 4
    - Windows Vista Service Pack 2
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows Vista x64 Edition Service Pack 2
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けません)
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けません)
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows Server 2008 for Itanium-based Systems Service Pack 2
      - Microsoft .NET Framework 1.1 Service Pack 1
      - Microsoft .NET Framework 2.0 Service Pack 2
      - Microsoft .NET Framework 3.0 Service Pack 2
      - Microsoft .NET Framework 4
    - Windows 7 for 32-bit Systems
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows 7 for 32-bit Systems Service Pack 1
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows 7 for x64-based Systems
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows 7 for x64-based Systems Service Pack 1
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows Server 2008 R2 for x64-based Systems
      - Microsoft .NET Framework 3.5.1
        (Windows Server 2008 R2 Server Core インストールは影響を受けます)
      - Microsoft .NET Framework 4
      Windows Server 2008 R2 for x64-based Systems Service Pack 1
      (Windows Server 2008 R2 Server Core インストールは影響を受けます)
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
      - Microsoft .NET Framework 4.5
    - Windows Server 2008 R2 for Itanium-based Systems および
      Windows Server 2008 R2 for Itanium-based Systems Service
      Pack 1
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows 8 for 32-bit Systems
      - Microsoft .NET Framework 3.5
      - Microsoft .NET Framework 4.5
    - Windows 8 for 64-bit Systems
      - Microsoft .NET Framework 3.5
      - Microsoft .NET Framework 4.5
    - Windows Server 2012
      (Windows Server 2012 Server Core インストールは影響を受けます)
      - Microsoft .NET Framework 3.5
      - Microsoft .NET Framework 4.5
    - Windows RT
      - Microsoft .NET Framework 4.5
  - 脆弱性の影響 : 特権の昇格

MS13-005 Windows カーネルモード ドライバーの脆弱性により、特権が昇格される  (2778930)

  - 影響を受けるソフトウェア:
    - Windows Vista Service Pack 2
    - Windows Vista x64 Edition Service Pack 2
    - Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けます)
    - Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けます)
    - Windows Server 2008 for Itanium-based Systems Service Pack 2
    - Windows 7 for 32-bit Systems および
      Windows 7 for 32-bit Systems Service Pack 1
    - Windows 7 for x64-based Systems および
      Windows 7 for x64-based Systems Service Pack 1
    - Windows Server 2008 R2 for x64-based Systems および
      Windows Server 2008 R2 for x64-based Systems Service Pack 1
      (Windows Server 2008 R2 Server Core インストールは影響を受けます)
    - Windows Server 2008 R2 for Itanium-based Systems および
      Windows Server 2008 R2 for Itanium-based Systems Service
      Pack 1
    - Windows 8 for 32-bit Systems
    - Windows 8 for 64-bit Systems
    - Windows Server 2012
      (Windows Server 2012 Server Core インストールは影響を受けます)
    - Windows RT
  - 脆弱性の影響 : 特権の昇格

MS13-006 System Center Operations Manager の脆弱性により、特権が昇格される (2748552)

  - 影響を受けるソフトウェア:
    - Windows Vista Service Pack 2
    - Windows Vista x64 Edition Service Pack 2
    - Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けます)
    - Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けます)
    - Windows Server 2008 for Itanium-based Systems Service Pack 2
    - Windows 7 for 32-bit Systems および
      Windows 7 for 32-bit Systems Service Pack 1
    - Windows 7 for x64-based Systems および
      Windows 7 for x64-based Systems Service Pack 1
    - Windows Server 2008 R2 for x64-based Systems および
      Windows Server 2008 R2 for x64-based Systems Service Pack 1
      (Windows Server 2008 R2 Server Core インストールは影響を受けます)
    - Windows Server 2008 R2 for Itanium-based Systems および
      Windows Server 2008 R2 for Itanium-based Systems Service
      Pack 1
    - Windows 8 for 32-bit Systems
    - Windows 8 for 64-bit Systems
    - Windows Server 2012
      (Windows Server 2012 Server Core インストールは影響を受けます)
    - Windows RT
  - 脆弱性の影響 : セキュリティ機能のバイパス

MS13-007 Open Data プロトコルの脆弱性により、サービス拒否が起こる  (2769327)

  - 影響を受けるソフトウェア:
    - Windows XP Service Pack 3
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows XP Professional x64 Edition Service Pack 2
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Server 2003 Service Pack 2
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Server 2003 x64 Edition Service Pack 2
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Server 2003 with SP2 for Itanium-based Systems
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Vista Service Pack 2
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Vista x64 Edition Service Pack 2
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Server 2008 for 32-bit Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けません)
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Server 2008 for x64-based Systems Service Pack 2
      (Windows Server 2008 Server Core インストールは影響を受けません)
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows Server 2008 for Itanium-based Systems Service Pack 2
      - Microsoft .NET Framework 3.5 Service Pack 1
      - Microsoft .NET Framework 4
    - Windows 7 for 32-bit Systems および
      Windows 7 for 32-bit Systems Service Pack 1
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows 7 for x64-based Systems および
      Windows 7 for x64-based Systems Service Pack 1
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows Server 2008 R2 for x64-based Systems
      - Microsoft .NET Framework 3.5.1
        (Windows Server 2008 R2 Server Core インストールは影響を受けます)
      - Microsoft .NET Framework 4
    - Windows Server 2008 R2 for x64-based Systems Service Pack 1
      (Windows Server 2008 R2 Server Core インストールは影響を受けます)
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows Server 2008 R2 for Itanium-based Systems および
      Windows Server 2008 R2 for Itanium-based Systems Service
      Pack 1
      - Microsoft .NET Framework 3.5.1
      - Microsoft .NET Framework 4
    - Windows 8 for 32-bit Systems
      - Microsoft .NET Framework 3.5
    - Windows 8 for 64-bit Systems
      - Microsoft .NET Framework 3.5
    - Windows Server 2012
      (Windows Server 2012 Server Core インストールは影響を受けます)
      - Microsoft .NET Framework 3.5
      - Management OData IIS Extension
  - 脆弱性の影響 : サービス拒否