A vulnerability has been reported in Microsoft Windows and Microsoft Office, which can be exploited by malicious people to compromise a users system.

The vulnerability is caused due to an error in RichEdit components handling of OLE objects in RTF (Rich Text Format) files. This can be exploited to cause a memory corruption by e.g. tricking a user into opening a malicious RTF document using a Microsoft Office application and interact with a specially crafted, embedded OLE object.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
* Kostya Kortchinsky of Immunity, Inc.
* Fabrice Desclaux of EADS Common Research Center.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-013 (KB918118):
http://www.microsoft.com/technet/security/Bulletin/MS07-013.mspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers