Microsoft has issued
one update for Windows and one for Microsoft Office as part of its
monthly patch cycle.
The
Office
update patches five separate vulnerabilities in Excel. The flaws are rated
'critical' to 'important' depending on the version of the software.
The vulnerability affects Office for Windows and
Apple's OS X, and could
allow an attacker to take control of a system through a specially crafted Excel
spreadsheet. However, the user would have to manually open the file to become
infected.
A sixth Office vulnerability affects a range of applications for Windows and
again could expose a user to a remote code execution, allowing a attacker to
install spyware or other
malware.
The
Windows
flaw affects systems running Windows XP SP1 and Windows Server 2003. It
could cause a privilege escalation, allowing a user with an existing log-in
account configured with limited privileges to gain full control of a system.
Microsoft also issued a security advisory alerting users to an update to
Adobe published in its Macromedia Flash Player. The software is bundled with
Windows.
Do you agree?
Have your say on this article