Two vulnerabilities have been reported in Microsoft Office, which can be exploited by malicious people to compromise a user's system.

1) The vulnerability is caused due to MSO.DLL loading libraries (e.g. ".dll") in an insecure manner when attempting to validate an opened file. This can be exploited to load arbitrary libraries by tricking a user into e.g. opening a PPT file located on a remote WebDAV or SMB share.

2) An error within MSO.dll when parsing unspecified data can be exploited to dereference an uninitialised value as an object pointer via e.g. a specially crafted Word document.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Parvez Anwar via Secunia
2) David Warren, CERT/CC.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS11-073 (KB2587634, KB2584052, KB2584063, KB2584066):
http://technet.microsoft.com/en-us/security/bulletin/ms11-073

US-CERT:
http://www.kb.cert.org/vuls/id/909022

Technical Analysis
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers