--- title: Patch Tuesday wrap-up, March 2014 - critical fixes from Microsoft and Adobe description: Patch Tuesday wrap-up, March 2014 - critical fixes from Microsoft and Adobe --- [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/head-logo-2.svg "TowerWall")](https://towerwall.com/) [![TowerWall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/towerwall-logo-white-test.svg "TowerWall")](https://towerwall.com/) - [Our Partners](https://towerwall.com/how-we-protect-you/our-technology-partners/) - Our Solutions - - Our Cybersecurity Solutions - We operationalize infosec, building security solutions that safeguard your most critical assets. - - [Solutions Overview](https://towerwall.com/cybersecurity-solutions/) - [Risk Assessments & Security Reviews](https://towerwall.com/cybersecurity-solutions/risk-assessments-security-reviews/) - [Program & Policy Development](https://towerwall.com/cybersecurity-solutions/program-policy-development/) - [Incident Response & Remediation](https://towerwall.com/cybersecurity-solutions/incident-response-remediation/) - [Managed Detection & Response](https://towerwall.com/cybersecurity-solutions/managed-detection-response/) - - [Compliance & Privacy](https://towerwall.com/cybersecurity-solutions/compliance-privacy/) - [Comprehensive Security Training](https://towerwall.com/cybersecurity-solutions/comprehensive-security-training/) - [Vulnerability Protection](https://towerwall.com/cybersecurity-solutions/vulnerability-protection/) - [Penetration Testing](https://towerwall.com/cybersecurity-solutions/penetration-testing/) - Virtual Security Officers - - Virtual Security Officer - Leverage the experience and security acumen of Towerwall’s on-demand security experts. - - [Virtual Chief Information Security Officer (VCISO)](https://towerwall.com/virtual-security-officers/virtual-chief-information-security-officer-vciso/) - [Virtual Data Protection Officer (vDPO)](https://towerwall.com/virtual-security-officers/virtual-data-protection-officer-vdpo/) - [Virtual Chief Privacy Officer (vCPO)](https://towerwall.com/virtual-security-officers/virtual-chief-privacy-officer-vcpo/) - We Advise - - We Advise - One-size security solutions only lead to failure. - Industries - [Higher Education](https://towerwall.com/industries/higher-education/) - [Financial Services & Banking](https://towerwall.com/industries/financial-services-banking/) - [Healthcare](https://towerwall.com/industries/healthcare/) - [BioPharma & Bio-Therapeutics](https://towerwall.com/industries/biopharma-bio-therapeutics/) - [Retail](https://towerwall.com/industries/retail/) - [Government](https://towerwall.com/industries/government/) - [Catholic Diocese](https://towerwall.com/industries/catholic-diocese-cybersecurity/) - [Cannabis](https://towerwall.com/industries/cannabis/) - [Small Business](https://towerwall.com/industries/small-business/) - [Enterprise](https://towerwall.com/industries/enterprise/) - Trends & Threats - [Remote Workforce](https://towerwall.com/trends-threats/remote-workforce/) - [Vendor Questionnaire](https://towerwall.com/trends-threats/vendor-questionnaire/) - [HIPAA](https://towerwall.com/trends-threats/hipaa/) - [Ransomware](https://towerwall.com/trends-threats/ransomware/) - [GDPR](https://towerwall.com/trends-threats/gdpr/) - [Cloud Security](https://towerwall.com/trends-threats/cloud-security/) - [Phishing](https://towerwall.com/trends-threats/phishing/) - [Cybersecurity Insurance](https://towerwall.com/trends-threats/cybersecurity-insurance/) - [Resources](https://towerwall.com/resources/) - - Resources - Our latest insights, events, and tools to keep you safe. - - [Insights](https://towerwall.com/resources/?resources_category=MTU%3D&focusarea=0&industries=0&search=) - [Webinars](https://towerwall.com/resources/?resources_category=MTg%3D&focusarea=0&industries=0&search=) - [Whitepapers](https://towerwall.com/resources/?resources_category=MTY%3D&focusarea=0&industries=0&search=) - [View All](https://towerwall.com/resources/) - [Company](https://towerwall.com/company/) - - Our Company - We are the industry’s leading cybersecurity preparedness partner. - - [Who We Are](https://towerwall.com/company/) - [Our Team](https://towerwall.com/company/our-team/) - [Our Approach](https://towerwall.com/our-approach/) - [Our Values](https://towerwall.com/company/our-values/) - - [Awards & Recognition](https://towerwall.com/company/awards-recognition/) - [Certifications & Affiliations](https://towerwall.com/company/certifications-affiliations/) - [Community Involvement](https://towerwall.com/company/community-involvement/) - [Careers](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) Topics network security, security software, Data Security, Security Threat, Information Security, Security, Microsoft, Security Alert, Big Data, Data Privacy, Enterprise, Data Breach # Patch Tuesday wrap-up, March 2014 - critical fixes from Microsoft and Adobe [By Michelle Drolet](https://blog.towerwall.com/author/towerwall2020) [Read More](https://blog.towerwall.com/author/towerwall2020) 1 Minute Read March 11, 2014 by [Paul Ducklin](http://nakedsecurity.sophos.com/author/pducklin/) on March 12, 2014 We already wrote about Microsoft's [March 2014 patches](http://nakedsecurity.sophos.com/2014/03/09/microsoft-patch-tuesday-5-bulletins-2-critical-1-mac/), noting that, as usually happens, there was an All-Points Bulletin for Internet Explorer coming up. Microsoft doesn't call them APBs, of course - they are *Cumulative Security Updates*, with one bulletin covering all the numerous versions, bitnesses and CPU flavors of Redmond's IE browser. What we weren't able to tell you in advance was whether the widely-publicized (but fortunately not widely-exploited) [CVE-2014-0322 hole](http://nakedsecurity.sophos.com/2014/03/09/microsoft-patch-tuesday-5-bulletins-2-critical-1-mac/) would be closed. Good news - [the fix](https://technet.microsoft.com/en-us/security/bulletin/ms14-012) made it into [this month's update](http://technet.microsoft.com/en-us/security/bulletin/ms14-mar). As we mentioned before, there wasn't actually a terrible urgency for the [CVE-2014-0322 fix](http://www.sophos.com/en-us/threat-center/threat-analyses/vulnerabilities/VET-000584.aspx), because a number of [workarounds and mitigations](http://nakedsecurity.sophos.com/2014/03/09/microsoft-patch-tuesday-5-bulletins-2-critical-1-mac/) were available. But a permanent fix is a permanent fix, so apply it as soon as you can, if you haven't let Windows Update apply it for you already. Adobe Flash has another [critical fix](http://helpx.adobe.com/security/products/flash-player/apsb14-08.html) to add to its two [recent](http://nakedsecurity.sophos.com/2014/02/04/adobe-fixes-critical-flash-flaw/) between-Patch-Tuesday [updates](http://nakedsecurity.sophos.com/2014/02/21/adobe-pushes-out-critical-flash-update-second-zero-day-hole-of-month/). Flash Player goes to 12.0.0.77 on Windows and Macintosh; Linux users are stuck on an older flavor of version 11 forever, and go to 11.2.202.346; other users who have stayed with version 11 out of choice or necessity get 11.7.700.272. Google Chrome, Microsoft IE 10 and Microsoft IE 11 include and manage their own Flash player code - Adobe has confirmed that both Google and Microsoft have published the necessary patches. The Microsoft flavor of Adobe's security fix isn't listed amongst Microsoft's own Patch Tuesday bulletins, but Microsoft's updating tools should take care of it for you. If you prefer the manual approach, [KB2938527](https://support.microsoft.com/kb/2938527) has the details and the downloads. Of course, those are just the top-of-mind patches. Don't forget the other four Microsoft bulletins. We've [written them up](http://www.sophos.com/en-us/threat-center/threat-analyses/vulnerabilities.aspx) with our assessment of their likely risk, if you like to do a risk/benefit check before you go live with updates, as follows: | **Microsoft ID** | **Sophos ID** | **Description and KB number** | | --- | --- | --- | | [MS14-013](http://technet.microsoft.com/en-us/security/bulletin/ms14-013) | [VET585](http://www.sophos.com/en-us/threat-center/threat-analyses/vulnerabilities/VET-000585.aspx) | Vulnerability in Microsoft DirectShow Could Allow Remote Code Execution (2929961) | | [MS14-014](http://technet.microsoft.com/en-us/security/bulletin/ms14-014) | [VET587](http://www.sophos.com/en-us/threat-center/threat-analyses/vulnerabilities/VET-000587.aspx) | Vulnerability in Silverlight Could Allow Security Feature Bypass (2932677) | | [MS14-015](http://technet.microsoft.com/en-us/security/bulletin/ms14-015) | [VET586](http://www.sophos.com/en-us/threat-center/threat-analyses/vulnerabilities/VET-000586.aspx) | Vulnerabilities in Windows Kernel Mode Driver Could Allow Elevation of Privilege (2930275) | | [MS14-016](http://technet.microsoft.com/en-us/security/bulletin/ms14-016) | [VET588](http://www.sophos.com/en-us/threat-center/threat-analyses/vulnerabilities/VET-000588.aspx) | Vulnerability in Security Account Manager Remote (SAMR) Protocol Could Allow Security Feature Bypass (2934418) |   #### Patch Tuesday wrap-up, March 2014 - critical fixes from Microsoft and Adobe Back to Top ## Related Insights ### [Firefox 32.0 fixes holes, shakes out some old SSL certs, introduces certificate pinning](https://blog.towerwall.com/firefox-32-0-fixes-holes-shakes-ssl-certs-introduces-certificate-pinning) network security, security software, Data Security, Security Threat, Information Security, Security, Microsoft, Security Alert, Big Data, Data Privacy, Enterprise, Data Breach ### [How Much Does a Data Breach Actually Cost?](https://blog.towerwall.com/much-data-breach-actually-cost) network security, security software, Data Security, Security Threat, Information Security, Security, Microsoft, Security Alert, Big Data, Data Privacy, Enterprise, Data Breach [View All Insights](https://blog.towerwall.com) × ## Talk with us now about: #### Your security needs. - ![Phone](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/phone-icon.svg "Phone") [Call 774.204.0700](tel:774.204.0700) - ![Mail](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/mail-icon.svg "Mail") [Email Us](mailto:info@towerwall.com) ### The front line of cybersecurity.™ For over 23 years, Towerwall, a woman-owned business, has helped scores of companies safeguard their data and leverage their investment in IT with advanced information security technology solutions and services. Our experience in all facets of information security coupled with serving in the CIO/CISO/ISO roles provides a unique first-hand understanding of the security challenges organizations face daily. ### Connect - - - - - [Career Opportunities](https://towerwall.com/company/careers/) - [Contact Us](https://towerwall.com/company/contact-us/) © Towerwall, Inc. and its licensees. All rights reserved [Privacy Policy](http://towerwall.com/privacy-policy/) Sitemap [Created by Howbridge](https://meethowbridge.com/) [![Towerwall](https://blog.towerwall.com/hubfs/raw_assets/public/Towerwall_July2021/images/footer-logo.svg "Towerwall")](https://towerwall.com/)