Zero Day

Microsoft previews three critical bulletins; two for Office

Posted in:

Denial of Service (DoS)
Exploit code
Microsoft
Patch Watch
Uncategorized
Viruses and Worms
Vulnerability research

Microsoft on Thursday previewed three critical bulletins for Microsoft Office and Windows and a moderate denial of service vulnerability for the company's security software.

According to Microsoft's advance notification, the software giant will address the following in its Patch Tuesday update May 13:

A critical remote code execution vulnerability primarily affecting Microsoft Office (Word) and another critical remote code execution flaw in Publisher. Affected software includes Office 2000, Office XP, Office 2003, Office 2007
A critical Jet database engine issue that affects Windows 2000, Windows XP and Windows Server 2003.
And a moderate bulletin was issued for a denial of service vulnerability in Windows Live OneCare, Microsoft Antigen, Microsoft Windows Defender, Microsoft Forefront Security.

posted by Larry Dignan
May 8, 2008 @ 11:32 am

Previous Post: Malware shipped with Firefox 2 language pack
Next Post: Major career web sites hit by spammers attack

Last 10 posts:

Opera patches 'extremely severe' security hole (11-23)
Exploit published for critical IE 7 zero-day flaw (11-23)
Inside the Google Chrome OS security model (11-19)
Microsoft finds security hole in Google Chrome Frame (11-19)
Mozilla locks out rogue Firefox add-ons (11-18)
Thousands of web sites compromised, redirect to scareware (11-17)
Microsoft confirms 'detailed' Windows 7 exploit (11-16)
Man-in-the-middle attacks demoed on 4 smartphones (11-13)
Microsoft bracing for malware attacks from embedded fonts (11-12)
Apple Safari exposes Windows to drive-by download attacks (11-11)