Two vulnerabilities have been reported in Microsoft Office Web Components, which can be exploited by malicious people to compromise a vulnerable system.

1) An error in the management of memory when parsing certain URLs can be exploited to corrupt memory.

2) An error in the management of memory when parsing a specially crafted execution command can be exploited to corrupt memory.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code when e.g. visiting a malicious website.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1) The vendor credits:
* Chris Ries, VigilantMinds Inc.
* Xiao Hui, NCNIPC.

2) The vendor credits Yuval Ben-Itzhak, Finjan.

Changelog
Further details available in Customer Area

Original Advisory
MS08-017 (KB933103):
http://www.microsoft.com/technet/security/Bulletin/MS08-017.mspx

Microsoft:
http://www.microsoft.com/technet/security/advisory/956391.mspx

Other references
Further details available in Customer Area

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available in Customer Area