ms12-028

The ms12-028 tag covers the Microsoft security bulletin MS12-028, which addressed a vulnerability in Microsoft Office and Microsoft Works. This important-rated update resolved a privately reported flaw that could allow remote code execution if a user opened a specially crafted Works file. Successful exploitation could grant an attacker the same user rights as the current user, making it especially risky for users with administrative privileges. The bulletin was published on April 10, 2012, and applied to affected versions of Microsoft Office and Works. Users are advised to apply the security update to mitigate the risk of remote code execution attacks.