Vulnerability in Microsoft Office Web Components Control Could Allow Remote Code Exec

[gregmcc]

See http://isc.sans.org/diary.html?storyid=6778
MS has released a workaround for it - but currently there's no patch.

See http://blogs.technet.com/srd/archiv...ice-web-components-activex-vulnerability.aspx