Security News > 2020 > March > Windows has a zero-day that won’t be patched for weeks
The Remote Code Execution vulnerabilities affect Adobe Type Manager Library, the part of Windows that manages PostScript Type 1 fonts.
Importantly the same danger would arise even if users viewed that document using the Windows File Explorer file manager preview features.
Dll was another mitigation for versions of Windows before Windows 10 1709, with instructions on how to do this for different older versions covered in the advisory.
Importantly, Windows 7 users whose installations lack an Extended Security Updates agreement won't receive patches for these flaws.
This is the third time in a matter of weeks Microsoft has faced having to patch a Windows zero day after running into some timing problems over patching.
News URL
https://nakedsecurity.sophos.com/2020/03/25/windows-has-a-zero-day-that-wont-be-patched-for-weeks/
Related news
- Microsoft fixes two Windows zero-days exploited in malware attacks (source)
- Telegram fixes Windows app zero-day caused by file extension typo (source)
- Telegram fixes Windows app zero-day used to launch Python scripts (source)
- Microsoft fixes Windows zero-day exploited in QakBot malware attacks (source)