A vulnerability has been reported in Microsoft Windows and Visual Studio, which can be exploited by malicious people to compromise a users system.

The vulnerability is caused due to a memory corruption in the MFC component when handling OLE objects in Rich Text Format (RTF) files. This can be exploited by e.g. tricking a user into opening a malicious RTF document using Wordpad and interact with a specially crafted embedded OLE object.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
* Kostya Kortchinsky, Immunity, Inc.
* Fabrice Desclaux, EADS Common Research Center.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-012 (KB924667):
http://www.microsoft.com/technet/security/Bulletin/MS07-012.mspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers