From: InfoSec News (alertsinfosecnews.org)
Date: Fri Aug 07 2009 - 03:25:33 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

http://www.eweek.com/c/a/Security/Microsoft-to-Fix-Windows-Office-Bugs-in-Critical-Updates-641093/

By Brian Prince
eWEEK.com
2009-08-06

Microsoft is releasing nine security bulletins for Patch Tuesday on Aug.
11. Among them is a patch for a vulnerability Microsoft warned in July
    was being exploited by attackers.

Microsoft has nine security bulletins planned for the Aug. 11 Patch
Tuesday release, including one addressing a critical vulnerability
Microsoft warned was under attack.

Tucked in among the five critical bulletins Microsoft will release is a
patch for a vulnerability in Microsoft Office Web Components the company
said in July could be exploited to take control of a vulnerable system.
The bug lies in the Spreadsheet ActiveX control. According to Microsoft,
when the ActiveX control is used in Internet Explorer, the control can
corrupt the system state and allow an attacker to run arbitrary code.

The bulletin covering that issue affects Microsoft Office, Microsoft
Visual Studio, ISA Server and BizTalk Server. The other four critical
bulletins are focused on Microsoft Windows, with one additionally
affecting Windows Client for Mac.

[...]

__________________________
Subscribe to InfoSec News
http://www.infosecnews.org

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]