Summary

• Microsoft published its monthly security updates on July 11, 2017. Microsoft addressed 54 vulnerabilities in Microsoft Windows, Microsoft Internet Explorer, Microsoft Edge, Microsoft Office, and Microsoft ASP.NET. The vulnerabilities could allow an attacker to execute arbitrary code, gain elevated privileges, bypass security protections, view sensitive information, or cause a denial of service condition.

Details

• Before deploying or installing Microsoft security updates, customers are advised to evaluate and assess the impact of the updates on Cisco products in their environments. To define a complete impact assessment and upgrade solution, Cisco recommends referring to the information in the Microsoft Security Update Guide and the compatibility information, update policies, and related support documentation for Cisco products.

  The following table identifies Cisco Security content and Cisco mitigation information that is associated with this Microsoft release:

  CVE ID	Cisco Vulnerability Alert	IPS Signature	CVSS Base Score
  CVE-2017-0170	Microsoft Windows Performance Monitor Information Disclosure Vulnerability	–	5.5
  CVE-2017-0243	Microsoft Office Remote Code Execution Vulnerability	–	7.8
  CVE-2017-8463	Microsoft Windows Explorer Arbitrary Code Execution Vulnerability	–	6.3
  CVE-2017-8467	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8486	Microsoft Windows Win32k Kernel Driver Information Disclosure Vulnerability	–	4.7
  CVE-2017-8495	Microsoft Windows Kerberos SNAME Security Bypass Vulnerability	–	7.5
  CVE-2017-8501	Microsoft Office Memory Corruption Vulnerability	–	7.8
  CVE-2017-8502	Microsoft Office Memory Corruption Vulnerability	–	7.8
  CVE-2017-8556	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8557	Microsoft Windows System Information Console Information Disclosure Vulnerability	–	5.5
  CVE-2017-8559	Microsoft Exchange Cross-Site Scripting Vulnerability	–	6.1
  CVE-2017-8560	Microsoft Exchange Cross-Site Scripting Vulnerability	–	6.1
  CVE-2017-8561	Microsoft Windows Kernel Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8562	Microsoft Windows Local Procedure Call Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8563	Microsoft Windows Privilege Escalation Vulnerability	–	7.5
  CVE-2017-8564	Microsoft Windows Kernel Information Disclosure Vulnerability	–	4.7
  CVE-2017-8565	Microsoft Windows PowerShell Arbitrary Code Execution Vulnerability	–	7.5
  CVE-2017-8566	Microsoft Windows Input Method Editor Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8569	Microsoft SharePoint Server Cross-Site Scripting Vulnerability	–	6.4
  CVE-2017-8570	Microsoft Office Arbitrary Code Execution Vulnerability	–	7.8
  CVE-2017-8573	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8574	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8577	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8578	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8580	Microsoft Windows Graphics Component Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8581	Microsoft Windows Win32k Kernel Driver Privilege Escalation Vulnerability	–	7.0
  CVE-2017-8582	Microsoft ASP.NET Information Disclosure Vulnerability	–	7.5
  CVE-2017-8584	Microsoft Windows Hololens Arbitrary Code Execution Vulnerability	–	10.0
  CVE-2017-8585	Microsoft Windows .NET Framework Denial of Service Vulnerability	–	7.5
  CVE-2017-8587	Microsoft Windows Explorer Denial of Service Vulnerability	–	7.4
  CVE-2017-8588	Microsoft Windows WordPad Arbitrary Code Execution Vulnerability	–	9.6
  CVE-2017-8589	Microsoft Windows Search Arbitrary Code Execution Vulnerability	–	10.0
  CVE-2017-8590	Microsoft Windows Common Log File System Privilege Escalation Vulnerability	–	9.3
  CVE-2017-8592	Microsoft Edge and Internet Explorer Security Bypass Vulnerability	Microsoft Internet Explorer Security Feature Bypass	5.4
  CVE-2017-8594	Microsoft Internet Explorer Memory Corruption Vulnerability	Microsoft Internet Explorer Type Confusion	7.5
  CVE-2017-8595	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8596	Microsoft Edge Memory Corruption Vulnerability	–	4.2
  CVE-2017-8598	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	Microsoft Edge Remote Code Execution	4.2
  CVE-2017-8599	Microsoft Edge Security Bypass Vulnerability	–	6.5
  CVE-2017-8601	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	Microsoft Edge Memory Corruption	4.2
  CVE-2017-8602	Microsoft Edge and Internet Explorer Spoofing Vulnerability	–	4.3
  CVE-2017-8603	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8604	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8605	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	Microsoft Edge Scripting Engine Memory Corruption	4.2
  CVE-2017-8606	Microsoft Edge and Internet Explorer Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8607	Microsoft Edge and Internet Explorer Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8608	Microsoft Edge and Internet Explorer Scripting Engine Memory Corruption Vulnerability	–	7.5
  CVE-2017-8609	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8610	Microsoft Edge Scripting Engine Memory Corruption Vulnerability	–	4.2
  CVE-2017-8611	Microsoft Edge Spoofing Vulnerability	–	4.3
  CVE-2017-8617	Microsoft Edge Arbitrary Code Execution Vulnerability	Microsoft Edge Code Execution	4.2
  CVE-2017-8618	Microsoft Internet Explorer Arbitrary Code Execution Vulnerability	Microsoft Internet Explorer Remote Code Execution	7.5
  CVE-2017-8619	Microsoft Edge Arbitrary Code Execution Vulnerability	Microsoft Edge Memory Corruption	4.2
  CVE-2017-8621	Microsoft Exchange Server URL Redirect Vulnerability	–	4.3

  
  

  Cisco Security

  Cisco Security Manager helps enable enterprises to manage and scale security operations efficiently and accurately. Its end-to-end tools provide consistent policy enforcement, quick troubleshooting of security events, and summarized reports from across the security deployment.

  Cisco Identity Services Engine gathers information from users, devices, infrastructure, and network services to enable organizations to enforce contextual-based business policies across the network. It provides network visibility for advanced discovery and troubleshooting and it combines authentication, authorization, and accounting (AAA), posture, profile, and guest management.

  Related Resources

  Cisco Security Manager
  Cisco ASA 5500 Series Adaptive Security Appliances
  Cisco Firewall Solutions
  Cisco Identity Services Engine
  Cisco Next-Generation Intrusion Prevention System
  Cisco IOS Intrusion Prevention System
  Cisco IOS NetFlow
  Cisco IPS Signature Downloads
  Cisco IPS Signature Search Page
  Cisco NAC Appliance
  Cisco Web Security Appliance