ms12-022

MS12-022 is a Microsoft security bulletin addressing a vulnerability in Expression Design that could allow remote code execution. The privately reported flaw involves insecure library loading, where opening a legitimate file (such as .xpr or .DESIGN) from a network directory containing a malicious DLL could lead to code execution. The update, rated Important, resolves this by correcting how Expression Design loads external libraries. This bulletin is part of the ongoing Microsoft Security Advisory (2269637) on insecure library loading. Users are advised to apply the update to mitigate the risk of remote code execution attacks.