March Patch Tuesday followed by PDF viewer patches
Posted by Virus Bulletin on Mar 12, 2009
Major kernel issue and PDF problems fixed, spreadsheet software remains vulnerable.
Microsoft released the March security bulletin this week, with the monthly Patch Tuesday updates rather lighter than usual. On the same day, Adobe released some important patches for its widely used PDF viewing software.
From Microsoft came a single 'critical' fix for the Windows kernel, covering a possible remote-access exploit, alongside two 'important' patches for problems in the SChannel systems and DNS and WINS server software. To the disappointment of many, a patch for some serious vulnerabilities in Excel was not forthcoming.
Meanwhile, Adobe issued patches for its Acrobat 9 and Reader 9 software, addressing some of the PDF exploitation problems which have become rife in recent months, and has promised further updates for other versions of its products in the next few weeks.
The official Microsoft bulletin is here, and the Adobe announcement here. Comment on the patches - and the lack of patches - is at ESET here, with a detailed breakdown at Symantec here.
F-Secure is continuing a campaign to persuade users to diversify to a wider range of PDF-viewing software, to reduce the threat surface. The company is giving equal billing to updates for the speedy Foxit reader on its blog here.
Posted on 12 March 2009 by Virus Bulletin
Today, we publish the VB2018 paper by Masarah Paquet-Clouston (GoSecure) who looked at the supply chain behind social media fraud.
Today, we publish the VB2018 paper from Saher Naumaan (BAE Systems) who looks at malware variants that contain a wiper functionality. We also publish the recording of her presentation.
The infamous Emotet trojan has added the capability to steal full email bodies from infected machines, opening the possibilities for more targeted spam and phishing campaigns.
Cisco Talos researchers Paul Rascagnères and Warren Mercer were among the first to write about the Olympic Destroyer, the malware that targeted the 2018 PyeongChang Winter Olympic Games. Today, we publish the paper they presented at VB2018 about the…
Today, we publish the VB2018 paper by Malwarebytes researcher Jérôme Segura, in which he details the shift from exploit kits to drive-by mining. We also publish the video of his VB2018 presentation.