Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK Patched

Summary: Microsoft released 14 security bulletins in March 2015 addressing 45 CVEs, with the first 5 rated critical and covering Internet Explorer, Office, Windows, and VBScript. The remaining 9 important bulletins cover Windows Kernel Mode Drivers, Exchange, Task Scheduler, Remote Desktop, SChannel, and the Microsoft Graphics component, including MS15-031 for the publicly disclosed FREAK vulnerability (CVE-2015-1637) in SChannel.
Key Takeaway: The FREAK patch does not disable EXPORT_RSA ciphers on Windows Server 2003, only moving them down the preferred cipher list, so systems on that platform remain exposed to the factoring attack until administrators act.

Read the original at Cisco Talos ↗