Make Homepage | Add To Favorites | Print Page | Submit News | Feedback | Contact | 

Your Technical Computer Information Resource!  
     
  Technical Updates @ TACKtech Corp.  

03.14.2012 - MS12-022 - Important : Vulnerability in Expression Design Could Allow Remote Code Execution (2651018) - Version: 1.1



View Microsoft related news. Severity Rating: Important
Revision Note: V1.1 (March 14, 2012): Removed erroneous installation switch option descriptions from the Security Update Deployment tables for all supported releases. This is an informational change only. There were no changes to the detection logic or the update files.
Summary: This security update resolves one privately reported vulnerability in Microsoft Expression Design. The vulnerability could allow remote code execution if a user opens a legitimate file (such as an .xpr or .DESIGN file) that is located in the same network directory as a specially crafted dynamic link library (DLL) file. Then, while opening the legitimate file, Microsoft Expression Design could attempt to load the DLL file and execute any code it contained. For an attack to be successful, a user must visit an untrusted remote file system location or WebDAV share and open a legitimate file (such as an .xpr or .DESIGN file) from this location that is then loaded by a vulnerable application.

- View Microsoft Security Bulletin MS12-022
- View Microsoft Knowledge Base Article - on: 1.
- Visit Microsoft Corporation

NID: 41304 / Submitted by: The Zilla of Zuron
Categories: Microsoft
Most recent Microsoft related news.
MS16-140 - Important: Security Update for Boot Manager (3193479) - Version: 1.1
MS16-130 - Critical: Security Update for Microsoft Windows (3199172) - Version: 1.1
MS16-134 - Important: Security Update for Common Log File System Driver (3193706) - Version: 1.0
MS16-141 - Critical: Security Update for Adobe Flash Player (3202790) - Version: 1.0
MS16-132 - Critical: Security Update for Microsoft Graphics Component (3199120) - Version: 1.0
View archive of Microsoft related news.

Visit the TACKtech Shop
  Popular Tech News  
  Most Viewed News  
  Top Affiliates  
........