News Microsoft Patches Critical VBA Flaw

Quack has already alerted some of you to this in this thread here.

From eWeek:

"Microsoft Corp. on Wednesday issued a patch for a critical vulnerability in its Visual Basic for Applications SDK, which could allow an attacker to execute arbitrary code on a vulnerable server. The weakness exists in the way that VBA looks at the properties of documents passed to it when the document is opened by a host application. There is a buffer overrun in this process, which an attacker could exploit to run code."

Full story here