Updates 10/13/15 - Microsoft & Adobe Tuesday: Reader, Flash, Air

Adobe AIR has been updated to 19.0.0.213

(for those who have/use AIR)

https://get.adobe.com/air/

Adobe has released security updates for Adobe Acrobat and Reader, for Windows and Macintosh.  

These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system:

Adobe Reader XI, sequential update (starting from any Windows 11.x version) to 11.0.13

https://www.adobe.com/support/downloads/detail.jsp?ftpID=5987

=========================

Remark:   For people using Reader DC (Document Cloud), or other Reader versions (e.g, Reader X) for Windows, you can locate your appropriate update here:  https://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows

For people using Acrobat  for Windows, you can locate your appropriate update here:  http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows

============

Documentation to be released as https://helpx.adobe.com/security/products/reader/apsb15-24.html

and http://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotes/11/11.0.13.html

The Adobe Reader/Acrobat updates insist on reactivating several associated StartUp programs (registry entries) that you might have previously disabled.

I've found the most effective way to stop them is to use CCleaner, select Tools / Startup , and then click-on and DISABLE each of the Adobe entries:

Acrotray (Adobe Assistant)

ARM

SpeedLauncher

[ Not sure why, but CCleaner is doing a better job on these Adobe "pests" than WinPatrol.... ]

From https://technet.microsoft.com/library/security/ms15-oct

The following 3 updates are rated CRITICAL:

MS15-106 Cumulative Security Update for Internet Explorer (3096441)

MS15-108 Security Update for JScript and VBScript to Address Remote Code Execution (3089659) 

MS15-109 Security Update for Windows Shell to Address Remote Code Execution (3096443) 

=================================

The following 3 updates are rated IMPORTANT:

MS15-107 Cumulative Security Update for Microsoft Edge (3096448) 

MS15-110 Security Updates for Microsoft Office to Address Remote Code Execution (3096440) 

MS15-111 Security Update for Windows Kernel to Address Elevation of Privilege (3096447)  

This month's MSRT adds detection/removal of the following malware families:

• Tescrypt
• Blakamba
• Diplugem
• Escad
• Joanap
• Brambul
• Drixed

=============================================================

For additional details/information, see http://blogs.technet.com/b/mmpc/archive/2015/10/13/msrt-october-2015-tescrypt.aspx

WARNING:  The link for this separate download of the MSRT is now pre-checking a box to also download "MSN default homepage & Bing default search engine".    Be sure to uncheck this, unless you really want it!

Malicious Software Removal Tool (MSRT, MRT) for October, version 5.29 

http://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspx 

Reminder:   Users who are paranoid about the remote possibility of a FP can opt to run this tool from a Command Prompt, appending a   /N   parameter [for "detect only" mode].

MBAM 2.2.0.1024 was pushed via the internal update on two of my systems...  for more details, see http://en.community.dell.com/support-forums/virus-spyware/f/3522/t/19656831

all of the Critical bulletins (MS15-106, MS15-108, MS15-109) are remote code execution issues affecting Internet Explorer, the Edge browser, VBScript & JScript Engines, Windows Shell, Office, Office Services and apps, as well as Microsoft Server Software...

Your best protection against these threats is to patch as quickly as possible.

http://www.csoonline.com/article/2992572/operating-system-security/experts-warn-users-to-quickly-apply-microsoft-patch-tuesday-updates.html

Has anyone running Windows 8/8.1 had a problem with yesterday's update as reported HERE?
See:  https://www.microsoft.com/en-us/download/details.aspx?id=49293

This may be a record:   0-day exploit allegedly discovered in yesterday's Flash update!

If confirmed, it wouldn't be surprising to see Adobe publish an emergency update in the next few days.

http://arstechnica.com/security/2015/10/new-zero-day-exploit-hits-fully-patched-adobe-flash/