MS11-059  MS11-059 - Important : Vulnerability in Data Access Components Could Allow Remote Code Execution (2560656) - Version: 1.1

Version2011-08-10 Severity Rating: Important Revision Note: V1.1 (August 10, 2011): Corrected the restart requirements for the update on all affected operating systems. Summary: This security update resolves a privately reported vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user opens a legitimate Excel file (such as a .xlsx file) that is located in the same network directory as a specially crafted library file. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Bulletin details at Microsoft.com