情報源
US-CERT Current Activity
Microsoft Releases Security Updates for its Malware Protection Engine
https://www.us-cert.gov/ncas/current-activity/2017/12/07/Microsoft-Releases-Security-Updates-its-Malware-Protection-Engine
概要
– Windows Defender
– Windows Intune Endpoint Protection
– Microsoft Exchange Server 2016
– Microsoft Exchange Server 2013
– Microsoft Forefront Endpoint Protection 2010
– Microsoft Forefront Endpoint Protection
– Microsoft Endpoint Protection
– Microsoft Security Essentials
関連文書 (日本語)
JPCERT/CC
Microsoft Malware Protection Engine のリモートでコードが実行される脆弱性(CVE-2017-11937)に関する注意喚起
https://www.jpcert.or.jp/at/2017/at170046.html
関連文書(英語)
CVE-2017-11937 | Microsoft Malware Protection Engine Remote Code Execution Vulnerability
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-11937
CVE-2017-11940 | Microsoft Malware Protection Engine Remote Code Execution Vulnerability
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-11940
引用元:JPCERTコーディネーションセンター
「JPCERT/CC WEEKLY REPORT 2017-12-13」
https://www.jpcert.or.jp/wr/2017/wr174801.html