HIGH: Two MS Office Security Bulletins Fix 7 - Seven Vunerabilities

Broadcast - Articles
TWO OFFICE SECURITY BULLETINS FIX SEVEN VULNERABILITIES

SEVERITY: HIGH

9 November, 2010

SUMMARY:

* These vulnerabilities affect: Most current versions of
Microsoft Office, and the components that ship with it

* How an attacker exploits it: Typically by enticing one of your
users to open a malicious Office document

* Impact: In the worst case, an attacker executes code on your
user's computer, gaining complete control of it

* What to do: Install Microsoft Office updates as soon as
possible, or let Microsoft's automatic update do it for you

---------------------------------------------------------------
This is a summary, for the complete alert, see Watchguard's web page:
https://www.watchguard.com/archive/showhtml.asp?pack=120268
--------------------------------------------------------------

STATUS:

Microsoft has released Office updates to fix these vulnerabilities.


REFERENCES:

* MS Security Bulletin MS10-087
http://www.microsoft.com/technet/security/bulletin/MS10-087.mspx

* MS Security Bulletin MS10-088
http://www.microsoft.com/technet/security/bulletin/MS10-088.mspx

This alert was researched and written by Corey Nachreiner, CISSP.