May 2008 Microsoft Security Bulletin Release

Microsoft is releasing the following four new security bulletins for newly discovered vulnerabilities described below.

Note in particular that MS08-026 includes additional security mitigations against attacks as identified in Microsoft Security Advisory 950627. It is recommended that both MS08-026 and MS08-028 be installed. For additional information on MS08-026, see MS08-026: How to prevent Word from loading RTF files.

Critical:

MS08-026:

Vulnerabilities in Microsoft Word Could Allow Remote Code Execution (951207)
Product: Word
Affected Software: Office 2000, Office XP, Office 2003, 2007 Office System, Office 2004 for Mac, Office 2008 for Mac, Word Viewer, Word Viewer 2003, Office Compatibility Pack

MS08-027:

Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (951208)
Product: Publisher
Affected Software: Office 2000, Office XP, Office 2003, 2007 Office System

MS08-028:

Vulnerability in Microsoft Jet Database Engine Could Allow Remote Code Execution (950749)
Product: Jet Database Engine
Affected Software: Windows 2000, Windows XP, Windows Server 2003

Moderate:

MS08-029:

Vulnerabilities in Microsoft Malware Protection Engine Could Allow Denial of Service (952044)
Product: Malware Protection (AV) Engine
Affected Software: Windows Live OneCare, Microsoft Antigen, Microsoft Windows Defender, Microsoft Forefront Security

References:

• May 2008 Monthly Release
• Microsoft Security Bulletin Summary for May 2008
• MS08-026: How to prevent Word from loading RTF files

Remember - "A day without laughter is a day wasted."
May the wind sing to you and the sun rise in your heart...