一、前言
2017年10月10日，微软发布了十月份的安全建议，包含针对其产品已被确认和解决的漏洞（公告解决了63个新漏洞，其中28个评级为重要级别，35个评级为重要），他们主要影响图形化功能、Edge、Internet Explorer、Office、Sharepoint、Windows图形显示接口、Windows内核模式驱动程序等。
其中对服务器端影响较大的漏洞有2个，分别为Windows DNSAPI 远程代码执行漏洞（CVE-2017-11779）和Windows SMB 远程代码执行漏洞（CVE-2017-11780）。攻击者成功利用这些漏洞后，可远程控制您的服务器。
影响范围@b@Internet Explorer@b@Microsoft Edge@b@Microsoft Windows@b@Microsoft Office and Microsoft Office Services and Web Apps@b@Skype for Business and Lync@b@Chakra Core@b@严重漏洞@b@CVE-2017-11813 - Internet Explorer Memory Corruption Vulnerability@b@CVE-2017-11822 - Internet Explorer Memory Corruption Vulnerability@b@CVE-2017-11762 - Microsoft Graphics Remote Code Execution Vulnerability@b@CVE-2017-11763 - Microsoft Graphics Remote Code Execution Vulnerability@b@CVE-2017-11797 - Scripting Engine Information Disclosure Vulnerability@b@CVE-2017-11767 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11792 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11793 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11796 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11798 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11799 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11800 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11801 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11802 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11804 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11805 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11806 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11807 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11808 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11809 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11810 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11811 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11812 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11821 - Scripting Engine Memory Corruption Vulnerability@b@CVE-2017-11779 - Windows DNSAPI Remote Code Execution Vulnerability@b@CVE-2017-11771 - Windows Search Remote Code Execution Vulnerability@b@CVE-2017-8727 - Windows Shell Memory Corruption Vulnerability@b@CVE-2017-11819 - Windows Shell Remote Code Execution Vulnerability@b@高危漏洞@b@CVE-2017-11790 - Internet Explorer Information Disclosure Vulnerability@b@CVE-2017-11794 - Microsoft Edge Information Disclosure Vulnerability@b@CVE-2017-8726 - Microsoft Edge Memory Corruption Vulnerability@b@CVE-2017-8693 - Microsoft Graphics Information Disclosure Vulnerability@b@CVE-2017-8717 - Microsoft JET Database Engine Remote Code Execution Vulnerability@b@CVE-2017-8718 - Microsoft JET Database Engine Remote Code Execution Vulnerability@b@CVE-2017-11826 - Microsoft Office Memory Corruption Vulnerability@b@CVE-2017-11825 - Microsoft Office Remote Code Execution Vulnerability@b@CVE-2017-11775 - Microsoft Office SharePoint XSS Vulnerability@b@CVE-2017-11777 - Microsoft Office SharePoint XSS Vulnerability@b@CVE-2017-11820 - Microsoft Office SharePoint XSS Vulnerability@b@CVE-2017-11776 - Microsoft Outlook Information Disclosure Vulnerability@b@CVE-2017-11774 - Microsoft Outlook Security Feature Bypass Vulnerability@b@CVE-2017-11772 - Microsoft Search Information Disclosure Vulnerability@b@CVE-2017-11823 - Microsoft Windows Security Feature Bypass@b@CVE-2017-11786 - Skype for Business Elevation of Privilege Vulnerability@b@CVE-2017-11769 - TRIE Remote Code Execution Vulnerability@b@CVE-2017-8689 - Win32k Elevation of Privilege Vulnerability@b@CVE-2017-8694 - Win32k Elevation of Privilege Vulnerability@b@CVE-2017-11783 - Windows Elevation of Privilege Vulnerability@b@CVE-2017-11816 - Windows GDI Information Disclosure Vulnerability@b@CVE-2017-11824 - Windows Graphics Component Elevation of Privilege Vulnerability@b@CVE-2017-11817 - Windows Information Disclosure Vulnerability@b@CVE-2017-11765 - Windows Kernel Information Disclosure Vulnerability@b@CVE-2017-11784 - Windows Kernel Information Disclosure Vulnerability@b@CVE-2017-11785 - Windows Kernel Information Disclosure Vulnerability@b@CVE-2017-11814 - Windows Kernel Information Disclosure Vulnerability@b@CVE-2017-8715 - Windows Security Feature Bypass Vulnerability@b@CVE-2017-11781 - Windows SMB Denial of Service Vulnerability@b@CVE-2017-11782 - Windows SMB Elevation of Privilege Vulnerability@b@CVE-2017-11815 - Windows SMB Information Disclosure Vulnerability@b@CVE-2017-11780 - Windows SMB Remote Code Execution Vulnerability@b@CVE-2017-11818 - Windows Storage Security Feature Bypass Vulnerability@b@CVE-2017-8703 - Windows Subsystem for Linux Denial of Service Vulnerability@b@CVE-2017-11829 - Windows Update Delivery Optimization Elevation of Privilege Vulnerability
二、漏洞修复建议
阿里云安全团队建议您关注这些漏洞，并根据业务情况去更新补丁，提高服务器安全性。
建议您开启Windows Update功能，然后单击检查更新按钮，根据业务情况下载安装相关安全补丁。安装完毕后重启服务器，检查系统运行情况。
注意：在更新安装升级前，请先进行测试，并务必准备好数据备份和快照，防止发生意外。
三、情报来源
http://blog.talosintelligence.com/2017/10/ms-tuesday.html