Microsoft re-issued security notice 3010060: One-click repair OLE remote code execution vulnerability

In the last month's "Patch Tuesday", Microsoft updated the patch to OLE to allow remote code execution to be fixed. We originally thought that the vulnerability had been fixed, but in fact it might be more complicated than we thought. Microsoft today again issued a security bulletin 3010060 around the vulnerability and provided a one-click "fix" solution.

According to Microsoft's announcement, the vulnerability is primarily affected by all versions of Microsoft Windows, including Windows Server 2003. The vulnerability was first discovered in Microsoft Office documents containing OLE objects (attacks using PowerPoint files). The full name of OLE is Object Linking and Embedding, which enables applications to create composite documents containing information from many different sources. For example, you can embed Excel files in PowerPoint documents, so you only need to Editing in the same place is fine.