10.14.2008 - MS08-056 - Moderate: Vulnerability in Microsoft Office Could Allow Information Disclosure (957699)

Bulletin Severity Rating:Moderate - This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow information disclosure if a user clicks a specially crafted CDO URL. An attacker who successfully exploited this vulnerability could inject a client side script in the user's browser that could spoof content, disclose information, or take any action that the user could take on the affected Web site. - View Microsoft Security Bulletin MS08-056 - View Microsoft Knowledge Base Article - 957699 - Visit Microsoft Corporation