March 2014 - Microsoft Releases 5 Security Advisories

Microsoft addresses the following vulnerabilities in its March batch of patches:

• (MS14-012) Cumulative Security Update for Internet Explorer (2925418)
  Risk Rating: Critical
  

  This security update resolves one publicly disclosed vulnerability and seventeen privately reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.



• (MS14-013) Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2929961)
  Risk Rating: Critical
  

  This security update resolves a vulnerability that could allow remote code execution if a user opens a specially crafted image file. An attacker who successfully exploited this vulnerability could gain the same user rights as the current user.

• (MS14-015) Vulnerabilities in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2930275)
  Risk Rating: Important
  

  This update addresses two vulnerabilities in Microsoft Windows. The more severe of these vulnerabilities could allow elevation of privilege if an attacker logs on to the system and runs a specially crafted application.



• (MS14-016) Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418)
  Risk Rating: Important
  

  This security update resolves a vulnerability that could allow security feature bypass if an attacker makes multiple attempts to match passwords to a username.



• (MS14-014) Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677)
  Risk Rating: Important
  

  This security update resolves a vulnerability in Microsoft Silverlight. The vulnerability could allow security feature bypass if an attacker hosts a website that contains specially crafted Silverlight content that is designed to exploit the vulnerability, and then convinces a user to view the website. Both Windows and Mac users are affected by this vulnerability.