Emergency Patch for Microsoft Font Driver

[silicon_toad2000]

I'm sure almost all of you would have heard of this by now.

Microsoft has pushed out an emergency patch for a remote code execution
vulnerability that affects all supported versions of Windows. The flaw
lies in the Windows Adobe Type Manager Library. It was discovered in the
documents that were stolen from Hacking Team and then leaked.
https://isc.sans.edu/forums/diary/Special+Microsoft+Bulletin+Patching+Remote+Code+Execution+Flaw+in+OpenType+Font+Drivers/19941/
http://www.theregister.co.uk/2015/07/20/windows_microsoft_emergency_patch/
http://www.computerworld.com/article/2949589/malware-vulnerabilities/microsoft-patches-windows-zero-day-found-in-hacking-teams-leaked-docs.html
http://www.scmagazine.com/microsoft-updates-address-opentype-font-driver-vulnerability/article/427424/
https://technet.microsoft.com/library/security/MS15-078

[Trestor]

I suppose that win 2000 and xp are just as vulnerable but are unsupported?

[silicon_toad2000]

maybe, but then again the vulnerability might be new from vista

[GhostShip]

From reading the text you simpy have to "Import" this into the registry. Double-clicking on the file seems to stimulate the operating system into offering to do so.

Remember to Unzip first 

[White Stripes]

I suppose that win 2000 and xp are just as vulnerable but are unsupported?

hackish fixes can be applied; http://www.pcworld.com/article/2310301/windows-xp-registry-hack-keeps-the-security-updates-rolling.html --- but ultimately disabling the driver in the registry is the best course for those machines...