Microsoft Security Bulletin Summary for April 2008

[malware]

Patch Tuesday is here with five critical and there important patches that address multiple vulnerabilities in Microsoft Office, Windows and Internet Explorer. One of the five critical patches is designed to resolve a flaw in Microsoft Office Project, which could allow attackers to take complete control of users' systems if they open a malicious Office Project file. A second critical patch is designed to tackle GDI (Graphics Device Interface) vulnerabilities in Windows. One of the security bulletins is a cumulative patch for IE, and the other is designed to resolve vulnerabilities in ActiveX Kill Bits. Microsoft also issued a critical Windows patch for vulnerabilities in its VBScript and JScript Scripting engines, which could provide attackers with access to users' systems and allow them to install programs, as well as view and change data. Download and find more information here: Microsoft Security Bulletin Summary for April 2008.

Source: Microsoft, CNET News