Guru3D.com
  • HOME
  • NEWS
    • Channels
    • Archive
  • DOWNLOADS
    • New Downloads
    • Categories
    • Archive
  • GAME REVIEWS
  • ARTICLES
    • Rig of the Month
    • Join ROTM
    • PC Buyers Guide
    • Guru3D VGA Charts
    • Editorials
    • Dated content
  • HARDWARE REVIEWS
    • Videocards
    • Processors
    • Audio
    • Motherboards
    • Memory and Flash
    • SSD Storage
    • Chassis
    • Media Players
    • Power Supply
    • Laptop and Mobile
    • Smartphone
    • Networking
    • Keyboard Mouse
    • Cooling
    • Search articles
    • Knowledgebase
    • More Categories
  • FORUMS
  • NEWSLETTER
  • CONTACT

New Reviews
Fractal Design Pop Air RGB Black TG review
Palit GeForce GTX 1630 4GB Dual review
FSP Dagger Pro (850W PSU) review
Razer Leviathan V2 gaming soundbar review
Guru3D NVMe Thermal Test - the heatsink vs. performance
EnGenius ECW220S 2x2 Cloud Access Point review
Alphacool Eisbaer Aurora HPE 360 LCS cooler review
Noctua NH-D12L CPU Cooler Review
Silicon Power XPOWER XS70 1TB NVMe SSD Review
Hyte Y60 chassis review

New Downloads
AMD Radeon Software Adrenalin 22.6.1 WHQL driver download
GeForce 516.59 WHQL driver download
Media Player Classic - Home Cinema v1.9.22 Download
AMD Chipset Drivers Download v4.06.10.651
CrystalDiskInfo 8.17 Download
AMD Radeon Software Adrenalin 22.6.1 Windows 7 driver download
ReShade download v5.2.2
HWiNFO Download v7.26
7-Zip v22.00 Download
GeForce 516.40 WHQL driver download


New Forum Topics
AMD Radeon Software Adrenalin 22.6.1 - Driver download and discussion NVIDIA seems to halt producing the 12 GB RTX 3080 [3rd-Party Driver] Amernime Zone Radeon Insight 22.5.1 WHQL Driver Pack (Released) i-3 Processor upgrade NVIDIA GeForce 516.59 WHQL driver download & Discussion According to Asus and Gigabyte, motherboard sales will fall by 25% this year. AMD to have Tensor Core equivalent on RDNA3 3060ti vs 6700xt a year later Extreme 4-Way Sli Tuning AMD AMF and GPU Encoding Issues and Discussion (notably for VR)




Guru3D.com » News » Microsoft advisory on Remote Code Execution Vulnerability

Microsoft advisory on Remote Code Execution Vulnerability

by Hilbert Hagedoorn on: 03/24/2020 10:15 AM | source: microsoft.com | 6 comment(s)
Microsoft advisory on Remote Code Execution Vulnerability

Microsoft yesterday issued a warning that attackers are exploiting a previously undisclosed security vulnerability found in all supported versions of Windows.

The company said that "limited targeted attacks" observed could leverage un-patched vulnerabilities in the Adobe Type Manager Library. The company provided a guidance to help reduce customer risk until the security update is released.  Microsoft is working on a fix. Updates that address security vulnerabilities in Microsoft software are typically released on Update Tuesday, the second Tuesday of each month. The operating system versions that are affected by this vulnerability include Windows 7, but only enterprise users with extended security support will receive patches.

While Microsoft insures to work on a patch, affected users should initially protect themselves as follows:

  • Deactivation of the preview in Windows Explorer
  • Deactivation of the detail view in Windows Explorer
  • Deactivation of the WebClient service via Services.msc
  • Rename the library (atmfd.dll) of the Adobe Type Manager

In the meantime, the advisory offered a temporary workaround for affected Windows users to mitigate the flaw until a fix is available.

ADV200006 | Type 1 Font Parsing Remote Code Execution Vulnerability

Security Advisory

Microsoft is aware of limited targeted attacks that could leverage un-patched vulnerabilities in the Adobe Type Manager Library, and is providing the following guidance to help reduce customer risk until the security update is released.

Two remote code execution vulnerabilities exist in Microsoft Windows when the Windows Adobe Type Manager Library improperly handles a specially-crafted multi-master font - Adobe Type 1 PostScript format.

There are multiple ways an attacker could exploit the vulnerability, such as convincing a user to open a specially crafted document or viewing it in the Windows Preview pane.

Microsoft is aware of this vulnerability and working on a fix. Updates that address security vulnerabilities in Microsoft software are typically released on Update Tuesday, the second Tuesday of each month. This predictable schedule allows for partner quality assurance and IT planning, which helps maintain the Windows ecosystem as a reliable, secure choice for our customers. The operating system versions that are affected by this vulnerability are listed below. Please see the mitigation and workarounds for guidance on how to reduce the risk.







« Thermalright releases Black Eagle slim sideflow TUF Gaming Alliance cooler · Microsoft advisory on Remote Code Execution Vulnerability · Review: Deepcool Gamer Storm Macube 310P »

Related Stories

Advertorial: Microsoft Office 2016 Only just 30$ on URcdkey - 03/20/2020 09:01 AM
Today what we recommend instead is to jump on URcdkeys where there is a surprise for all GURU3D readers! URcdkey sells serial codes (Product Keys) for many software suites. Today they offer you the pr...

Microsoft Bing shows an easy way to track Corona virus by country (tracker) - 03/17/2020 09:19 AM
While the coronavirus is spreading across the world, Microsoft offers an easy way to track them by country and state with the help of Bing's search engine....

Microsoft Shuts Down Necurs Botnet - 03/17/2020 09:00 AM
Microsoft, in collaboration with its industry partners worldwide, announced Tuesday it has taken legal and technical action to take down the infamous Necurs Botnet, one of the biggest spam email and m...

Xbox Series X: Specs Released by Microsoft - 8-Core ZEN and 3328 shader processors GPU - 03/16/2020 04:13 PM
The next generation of Xbox is defined by three primary characteristics: Power, Speed and Compatibility. Microsoft now shared all specification on their blog, and they are pretty impressive....

Ubisoft and Microsoft announce E3 2020 conferences will become digital conferences - 03/12/2020 08:38 AM
3 2020 was canceled due to the coronavirus outbreak, now  Microsoft and Ubisoft announced that they would still reveal the planned news, only through digital events....


2 pages 1 2


Rich_Guy
Senior Member



Posts: 12784
Joined: 2003-05-11

#5772851 Posted on: 03/24/2020 02:05 PM
Thanks Hilbert, done :)

GDGR
Junior Member



Posts: 2
Joined: 2019-09-04

#5772861 Posted on: 03/24/2020 02:57 PM
i can't live without "detail view" in explorer :/

Webhiker
Senior Member



Posts: 741
Joined: 2011-03-23

#5772862 Posted on: 03/24/2020 03:05 PM
Mitigations and workarounds are explained in detail here : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ADV200006

Kaarme
Senior Member



Posts: 2947
Joined: 2013-03-10

#5772864 Posted on: 03/24/2020 03:08 PM
i can't live without "detail view" in explorer :/


I have Win10 in my native language, so I naturally don't have a "detail view", as it's all translated. I should be safe.

Astyanax
Senior Member



Posts: 13438
Joined: 2018-03-21

#5773027 Posted on: 03/25/2020 12:16 AM
any patched up web browser will have no issues, this is a situation that can only screw you if you go looking for an infection.

2 pages 1 2


Post New Comment
Click here to post a comment for this news story on the message forum.


Guru3D.com © 2022