ms10-096

MS10-096 is a security bulletin from Microsoft addressing a vulnerability in Windows Address Book that could allow remote code execution. The issue arises when a user opens a Windows Address Book file from the same network folder as a specially crafted library file. This security update, rated Important, was published on December 14, 2010. For an attack to succeed, a user must visit an untrusted remote file system location or WebDAV share and open a document that is loaded by a vulnerable application. The update resolves the publicly disclosed vulnerability to prevent such attacks.