Updates 3/8/16 - "Trifecta Tuesday"

Adobe has released "out-of-cycle" security updates for Adobe Acrobat and Reader, for Windows.  

These updates address critical vulnerabilities that could potentially allow an attacker to take control of the affected system:

Adobe Reader XI, sequential update (starting from Windows 11.0.14 version) to 11.0.15

https://www.adobe.com/support/downloads/detail.jsp?ftpID=6042 

=========================

Remark:   For people using Reader DC (Document Cloud), or other Reader versions for Windows, you can locate your appropriate update here:  https://www.adobe.com/support/downloads/product.jsp?product=10&platform=Windows

For people using Acrobat  for Windows, you can locate your appropriate update here:  http://www.adobe.com/support/downloads/product.jsp?product=1&platform=Windows

============

Documentation has been released as https://helpx.adobe.com/security/products/acrobat/apsb16-09.html

and https://www.adobe.com/devnet-docs/acrobatetk/tools/ReleaseNotes/11/11.0.15.html

=============

Reminder:   Adobe Acrobat X [10] and Adobe Reader X [10] are no longer supported; end-of-life was 11/15/15.

Firefox 45.0 ( https://www.mozilla.org/en-US/firefox/45.0/releasenotes/ )

WARNING:  The link for this separate download of the MSRT is now pre-checking a box to also download "MSN default homepage & Bing default search engine".    Be sure to uncheck this, unless you really want it!

Malicious Software Removal Tool (MSRT, MRT) for March, version 5.34

http://www.microsoft.com/en-us/download/malicious-software-removal-tool-details.aspx 

Reminder:   Users who are paranoid about the remote possibility of a FP can opt to run this tool from a Command Prompt, appending a   /N   parameter [for "detect only" mode].

=========================================================

Fixed in Firefox 45  ( https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox/#firefox45 )

• 2016-37 Font vulnerabilities in the Graphite 2 library
• 2016-35 Buffer overflow during ASN.1 decoding in NSS
• 2016-34 Out-of-bounds read in HTML parser following a failed allocation
• 2016-33 Use-after-free in GetStaticInstance in WebRTC
• 2016-32 WebRTC and LibVPX vulnerabilities found through code inspection
• 2016-31 Memory corruption with malicious NPAPI plugin
• 2016-30 Buffer overflow in Brotli decompression
• 2016-29 Same-origin policy violation using perfomance.getEntries and history navigation with session restore
• 2016-28 Addressbar spoofing though history navigation and Location protocol property
• 2016-27 Use-after-free during XML transformations
• 2016-26 Memory corruption when modifying a file being read by FileReader
• 2016-25 Use-after-free when using multiple WebRTC data channels
• 2016-24 Use-after-free in SetBody
• 2016-23 Use-after-free in HTML5 string parser
• 2016-22 Service Worker Manager out-of-bounds read in Service Worker Manager
• 2016-21 Displayed page address can be overridden
• 2016-20 Memory leak in libstagefright when deleting an array during MP4 processing
• 2016-19 Linux video memory DOS with Intel drivers
• 2016-18 CSP reports fail to strip location information for embedded iframe pages
• 2016-17 Local file overwriting and potential privilege escalation through CSP reports
• 2016-16 Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)

from https://technet.microsoft.com/library/security/ms16-mar

The following 5 updates are rated CRITICAL:

MS16-023 Cumulative Security Update for Internet Explorer (3142015)

MS16-024   Cumulative Security Update for Microsoft Edge (3142019)

MS16-026 Security Update for Graphic Fonts to Address Remote Code Execution (3143148)                  

MS16-027 Security Update for Windows Media to Address Remote Code Execution (3143146)                  

MS16-028 Security Update for Microsoft Windows PDF Library to Address Remote Code Execution (3143081)                  

=================================

The following 8 updates are rated IMPORTANT:

MS16-025 Security Update for Windows Library Loading to Address Remote Code Execution (3140709)       

MS16-029 Security Update for Microsoft Office to Address Remote Code Execution (3141806)                  

MS16-030 Security Update for Windows OLE to Address Remote Code Execution (3143136)                  

MS16-031 Security Update for Microsoft Windows to Address Elevation of Privilege (3140410)                  

MS16-032 Security Update for Secondary Logon to Address Elevation of Privilege (3143141)                  

MS16-033 Security Update for Windows USB Mass Storage Class Driver to Address Elevation of Privilege (3143142)

MS16-034 Security Update for Windows Kernel-Mode Drivers to Address Elevation of Privilege (3143145)

MS16-035 Security Update for .NET Framework to Address Security Feature Bypass (3141780)                  

This month's MSRT (cited above) added detection/removal of

Win32/Fynloski [aka DarkComet] - a remote access tool (RAT) that allows attackers to take control of your PC to perform various specific functions, such as record your information or download other malware.

and 

Win32/Vonteera - An adware program [that] displays ads as you browse the web.

EDIT:   For additional information, see https://blogs.technet.microsoft.com/mmpc/2016/03/09/msrt-march-2016-vonteera/