Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: Grey Friday? - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Grey Friday?

Just as the memories of this months Patch Tuesday faded into the past, Microsoft have announced an update to the advisory for MS07-042.

Microsoft have updated from Version 1.1 to Version 2.0 and it covers two issues

  • Added Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats and Microsoft Expression Web as affected products.  
  • Potential reliability issue exists in applications that have installed Microsoft XML Core Services 4.0 on Windows Vista,     which can be addressed by applying the download available in Microsoft Knowledge Base Article 941833.

However, FIRST have indicated that it also fixes a privately reported vulnerability that could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer.

 

Stephen

89 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!