Adobe, Microsoft Issue Critical Updates

Summary: Adobe and Microsoft released critical security updates on April 10, 2012, with Microsoft fixing at least 11 flaws in Windows and Windows software and Adobe patching four vulnerabilities in Acrobat and Reader. Seven of Microsoft's 11 fixes earned its most serious "critical" rating, and Microsoft said it expects attackers to quickly develop reliable exploits for at least four of the vulnerabilities.
Bottom line: Microsoft called MS12-027 its highest priority update because it affects an unusually wide range of products - Office 2003 through 2010, SQL Server 2000 through 2008 R2, BizTalk Server 2002, Commerce Server 2002 through 2009 R2, Visual FoxPro 8 and Visual Basic 6 Runtime - and attackers were already embedding the CVE-2012-0158 exploit in RTF documents attached to email.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2012-0158
Related: CVE-2012-0158: Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability Known Exploited Vulnerabilities · Nov 03, 2021
CVE-2014-1761, Oh did you mean CVE-2012-2539? Cyber Risks ·
Top 20 Vulnerabilities Exploited by Cyber Attackers | Qualys Cyber Risks ·