微软已经发布了三月安全公告,本月的公告数量并不多,仅仅4个,但是危险性却是非常的大,其中还包括Microsoft Excel的0day漏洞,利用该漏洞的攻击代码和恶意软件均已在网上开始传播.
此外,其它三个补丁的风险评级无一例外都是“危急”等级,希望大家注意对自己的系统进行修补工作.

查看:Microsoft Security Bulletin Summary for March 2008

Bulletin Identifier         Microsoft Security Bulletin MS08-014

Bulletin Title
       

Vulnerabilities in Microsoft Excel Could Allow Remote Code Execution (949029)

Executive Summary
       

This security update resolves several privately reported and publicly reported vulnerabilities in Microsoft Office Excel that could allow remote code execution if a user opens a specially crafted Excel file. An attacker who successfully exploited these vulnerabilities could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Maximum Severity Rating
       

Critical

Impact of Vulnerability
       

Remote Code Execution

Detection
       

Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart.

Affected Software
       

Microsoft Office. For more information, see the Affected Software and Download Locations section.


Bulletin Identifier         Microsoft Security Bulletin MS08-015

Bulletin Title
       

Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)

Executive Summary
       

This security update resolves a privately reported vulnerability in Microsoft Office Outlook. The vulnerability could allow remote code execution if Outlook is passed a specially crafted mailto URI. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights. This vulnerability is not exploitable by simply viewing an e-mail through the Outlook preview pane.

Maximum Severity Rating
       

Critical

Impact of Vulnerability
       

Remote Code Execution

Detection
       

Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart.

Affected Software
       

Microsoft Office. For more information, see the Affected Software and Download Locations section.


Bulletin Identifier         Microsoft Security Bulletin MS08-016

Bulletin Title
       

Vulnerabilities in Microsoft Office Could Allow Remote Code Execution (949030)

Executive Summary
       

This security update resolves two privately reported vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a malformed Office file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Maximum Severity Rating
       

Critical

Impact of Vulnerability
       

Remote Code Execution

Detection
       

Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update will not require a restart.

Affected Software
       

Microsoft Office. For more information, see the Affected Software and Download Locations section.


Bulletin Identifier         Microsoft Security Bulletin MS08-017

Bulletin Title
       

Vulnerabilities in Microsoft Office Web Components Could Allow Remote Code Execution (933103)

Executive Summary
       

This critical update resolves two privately reported vulnerabilities in Microsoft Office Web Components. These vulnerabilities could allow remote code execution if a user viewed a specially crafted Web page. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.

Maximum Severity Rating
       

Critical

Impact of Vulnerability
       

Remote Code Execution

Detection
       

Microsoft Baseline Security Analyzer can detect whether your computer system requires this update. The update may require a restart.

Affected Software
       

Microsoft Office Web Components. For more information, see the Affected Software and Download Locations section.