Security: Microsoft Security Bulletin MS15-078 - Critical

[ewemoa]

This security update resolves a vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a specially crafted document or visits an untrusted webpage that contains embedded OpenType fonts.

via: https://technet.microsoft.com/en-us/library/security/ms15-078.aspx

[mouser]

Thanks for posting this 

[MilesAhead]

So much for "allow pages to use own fonts" eh? 

[tomos]

Thanks for the tip
was being lazy about latest updates, but have gone done it now.

[ewemoa]

Supposedly, the fix addresses fall-out from the recent leakage:

  http://www.computerworld.com/article/2949589/malware-vulnerabilities/microsoft-patches-windows-zero-day-found-in-hacking-teams-leaked-docs.html
  http://blog.trendmicro.com/trendlabs-security-intelligence/a-look-at-the-open-type-font-manager-vulnerability-from-the-hacking-team-leak/

[x16wda]

And note that the MS15-078 bulletin does not include Win 2003. I think they waited 6 extra days to release it on purpose.