March Patch Tuesday followed by PDF viewer patches

Posted by   Virus Bulletin on   Mar 12, 2009

Major kernel issue and PDF problems fixed, spreadsheet software remains vulnerable.

Microsoft released the March security bulletin this week, with the monthly Patch Tuesday updates rather lighter than usual. On the same day, Adobe released some important patches for its widely used PDF viewing software.

From Microsoft came a single 'critical' fix for the Windows kernel, covering a possible remote-access exploit, alongside two 'important' patches for problems in the SChannel systems and DNS and WINS server software. To the disappointment of many, a patch for some serious vulnerabilities in Excel was not forthcoming.

Meanwhile, Adobe issued patches for its Acrobat 9 and Reader 9 software, addressing some of the PDF exploitation problems which have become rife in recent months, and has promised further updates for other versions of its products in the next few weeks.

The official Microsoft bulletin is here, and the Adobe announcement here. Comment on the patches - and the lack of patches - is at ESET here, with a detailed breakdown at Symantec here.

F-Secure is continuing a campaign to persuade users to diversify to a wider range of PDF-viewing software, to reduce the threat surface. The company is giving equal billing to updates for the speedy Foxit reader on its blog here.

Posted on 12 March 2009 by Virus Bulletin

twitter.png
fb.png
linkedin.png
googleplus.png
reddit.png

 

Latest posts:

Throwback Thursday: Giving the EICAR test file some teeth

The 68-byte EICAR test file plays as important a role today as it did 19 years ago. In this week's Throwback Thursday we look back at a VB99 conference paper in which Randy Abrams described how the use of this 'miracle tool' could help enhance your…

XMRig used in new macOS cryptominer

A new piece of cryptocurrency-mining malware on macOS has been found to use the popular XMRig miner.

Tendency for DDoS attacks to become less volumetric fits in a wider trend

CDN provider Cloudflare reports an increase in DDoS attacks targeting layer 7 and focusing on exhausting server resources rather than sending large volumes of data. This fits in a wider trend.

Turkish Twitter users targeted with mobile FinFisher spyware

Through fake social media accounts, users were tricked into installing an Android application that was actually a mobile version of the FinFisher spyware.

Hide'n'Seek IoT botnet adds persistence

The Hide'n'Seek IoT botnet has received an update to make its infection persist on infected devices beyond a restart.