Microsoft Graphics Component Remote Code Execution Vulnerability

A vulnerability was identified in Microsoft Office. A remote user can cause arbitrary code to be executed on the target user's system.

A remote user can create a specially crafted TIFF image file that, when loaded by the target user, will trigger a memory corruption flaw in a Microsoft graphics component and execute arbitrary code on the target system. The code will run with the privileges of the target user.

Note: Vendor patch is currently unavailable. This vulnerability is being actively exploited.