---------------------------------------------------------------------- Do you have VARM strategy implemented? (Vulnerability Assessment Remediation Management) If not, then implement it through the most reliable vulnerability intelligence source on the market. Implement it through Secunia. For more information visit: http://secunia.com/advisories/business_solutions/ Alternatively request a call from a Secunia representative today to discuss how we can help you with our capabilities contact us at: sales@secunia.com ---------------------------------------------------------------------- TITLE: Microsoft Office ActiveX Controls Multiple Vulnerabilities SECUNIA ADVISORY ID: SA37005 VERIFY ADVISORY: http://secunia.com/advisories/37005/ DESCRIPTION: Some vulnerabilities have been reported in Microsoft Office, which can be exploited by malicious people to potentially bypass security features, gain knowledge of sensitive information, or compromise a user's system. The vulnerabilities are caused due to the use of a vulnerable Active Template Library (ATL) version. For more information: SA35967 SOLUTION: Apply patches. Microsoft Office XP SP3 with Microsoft Outlook 2002 SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=04878c2c-eb97-426f-be08-89036a6799db Microsoft Office 2003 SP3 with Microsoft Office Outlook 2003 SP3: http://www.microsoft.com/downloads/details.aspx?FamilyId=79e2b2e8-d5e8-4014-b489-720af2b5083d Microsoft Office 2007 SP1/SP2 with Microsoft Office Outlook 2007 SP1/SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=d39234a3-c62c-44ba-a626-3179a183ca09 Microsoft Office Visio Viewer 2007, 2007 SP1, or 2007 SP2: http://www.microsoft.com/downloads/details.aspx?FamilyId=d20004c5-dd01-459e-8120-5f127e20c085 Microsoft Office Visio 2002/2003 Viewer: The vendor recommends an upgrade to Microsoft Office Visio Viewer 2007. The vulnerability is additionally mitigated by MS09-034. ORIGINAL ADVISORY: Microsoft (972363, 973702, 973705, 973965): http://www.microsoft.com/technet/security/bulletin/ms09-060.mspx OTHER REFERENCES: SA35967: http://secunia.com/advisories/35967/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------