New Security Advisory from MS, this time Office

satrow · Jul 13, 2009

http://www.microsoft.com/technet/security/advisory/973472.mspx

Microsoft is investigating a privately reported vulnerability in Microsoft Office Web Components. An attacker who successfully exploited this vulnerability could gain the same user rights as the local user. When using Internet Explorer, code execution is remote and may not require any user intervention.

We are aware of attacks attempting to exploit the vulnerability.
Click to expand...

Affected Software

Microsoft Office XP Service Pack 3

Microsoft Office 2003 Service Pack 3

Microsoft Office XP Web Components Service Pack 3

Microsoft Office 2003 Web Components Service Pack 3

Microsoft Office 2003 Web Components for the 2007 Microsoft Office system Service Pack 1

Microsoft Internet Security and Acceleration Server 2004 Standard Edition Service Pack 3

Microsoft Internet Security and Acceleration Server 2004 Enterprise Edition Service Pack 3

Microsoft Internet Security and Acceleration Server 2006

Internet Security and Acceleration Server 2006 Supportability Update

Microsoft Internet Security and Acceleration Server 2006 Service Pack 1

Microsoft Office Small Business Accounting 2006
Click to expand...

Workaround and 'fix' http://support.microsoft.com/kb/973472

More info at http://blogs.technet.com/srd/archive/2009/07/13/more-information-about-the-office-web-components-activex-vulnerability.aspx

Log in or Sign up

New Security Advisory from MS, this time Office

satrow Major Geek Extraordinaire

Log in or Sign up

New Security Advisory from MS, this time Office

satrow Major Geek Extraordinaire

Useful Searches