Security: Microsoft Security Bulletin MS15-078 - Critical

[ewemoa]

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted document or visits an untrusted webpage that contains embedded OpenType fonts.

via: https://technet.micr...curity/ms15-078.aspx

[mouser]

Thanks for posting this 

[MilesAhead]

So much for "allow pages to use own fonts" eh? 

[tomos]

Thanks for the tip
was being lazy about latest updates, but have gone done it now.

[ewemoa]

Supposedly, the fix addresses fall-out from the recent leakage:

  http://www.computerw...ams-leaked-docs.html
  http://blog.trendmic...e-hacking-team-leak/

[x16wda]

And note that the MS15-078 bulletin does not include Win 2003. I think they waited 6 extra days to release it on purpose.