MS15-013 - Important: Vulnerability in Microsoft Office Could Allow Security Feature Bypass...

[Guest Microsoft Security]

Severity Rating: Important

Revision Note: V1.0 (February 10, 2015): Bulletin published.

Summary: This security update resolves one publicly disclosed vulnerability in Microsoft Office. The vulnerability could allow security feature bypass if a user opens a specially crafted Microsoft Office file. The security feature bypass by itself does not allow arbitrary code execution. However, an attacker could use this security feature bypass vulnerability in conjunction with another vulnerability, such as a remote code execution vulnerability, to run arbitrary code.

 

Continue reading...