ms12-002

The ms12-002 tag covers discussions about Microsoft Security Bulletin MS12-002, which addresses a vulnerability in Windows Object Packager that could allow remote code execution. This security update resolves a privately reported issue where an attacker could exploit the vulnerability if a user opens a legitimate file with an embedded packaged object located in the same network directory as a specially crafted executable file. Successful exploitation could give an attacker the same user rights as the logged-on user, potentially allowing them to install programs, view or change data, or create new accounts. The bulletin was rated Important and published on January 10, 2012.