Microsoft Issues Three Critical Patches

As part of its July security bulletin, Microsoft has issued three critical patches for Windows and Office. Each fix covers a vulnerability that could enable remote code execution on an affected machine, and possibly enable an attacker to take complete control over the system.

The vulnerability in Office involves a font parsing problem in Word, which was discovered by iDEFENSE. The two other critical patches correct problems in the Microsoft Color Management Module and JView Profiler, both of which affect all versions of Windows. Windows 98 and Me, however, are not critically affected and will not be patched.