Microsoft Office Unspecified String Handling Vulnerability

[pedantic]

Linky

Critical: Extremely critical
Impact: System access
Where: From remote
Solution Status: Unpatched

A vulnerability has been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an unspecified error when handling strings and can be exploited to cause a memory corruption.

Successful exploitation allows execution of arbitary code.

NOTE: According to Microsoft, the vulnerability is currently being actively exploited via Excel, but other Office applications may also be affected.

Solution:
Do not open untrusted Office documents

[Nikesh]

It's a good job I upgraded to Office 2007.

[Graham M]

Originally Posted by Nikesh

It's a good job I upgraded to Office 2007.

It doesn't say that it doesn't affect that does it?

[MadGamer]

When are the going to release fixes for these vulnerabilities? They all seem to be occuring too often lately.

[Nikesh]

Originally Posted by Zeph

It doesn't say that it doesn't affect that does it?

Well, Office 2007 isn't in the list so I'm hoping it doesn't affect it.