Broadcast - Articles
TWO OFFICE SECURITY BULLETINS FIX SEVEN VULNERABILITIES
SEVERITY: HIGH
9 November, 2010
SUMMARY:
* These vulnerabilities affect: Most current versions of
Microsoft Office, and the components that ship with it
* How an attacker exploits it: Typically by enticing one of your
users to open a malicious Office document
* Impact: In the worst case, an attacker executes code on your
user's computer, gaining complete control of it
* What to do: Install Microsoft Office updates as soon as
possible, or let Microsoft's automatic update do it for you
---------------------------------------------------------------
This is a summary, for the complete alert, see Watchguard's web page:
https://www.watchguard.com/archive/showhtml.asp?pack=120268
--------------------------------------------------------------
STATUS:
Microsoft has released Office updates to fix these vulnerabilities.
REFERENCES:
* MS Security Bulletin MS10-087
http://www.microsoft.com/technet/security/bulletin/MS10-087.mspx
* MS Security Bulletin MS10-088
http://www.microsoft.com/technet/security/bulletin/MS10-088.mspx
This alert was researched and written by Corey Nachreiner, CISSP.
