Microsoft: security bulletins for the month of May 2008

Microsoft has put its new online security bulletins for the month of May. As usual, all patches are available on Windows Update or through automatic updates. This month, three bulletins are critical and another moderate who are available.

Updates critiques:
MS08-026: This security update fixes vulnerabilities in Microsoft Word that could allow remote code execution if a user opened a Word file specially designed. Any attacker who would be able to exploit these vulnerabilities could take full control of the system affected.
MS08-027: This security update addresses a vulnerability in Microsoft Publisher that could allow remote code execution if a user opened a file Publisher specially designed. Any attacker who would be able to exploit this vulnerability could take full control of the system affected.
MS08-028: This security update addresses a security vulnerability in the database engine Jet in Microsoft Windows. Any attacker who would be able to exploit this vulnerability could take full control of the system affected.
Updated moderate:
MS08-029: This security update fixes two vulnerabilities reported confidentially in the engine protection against malicious software Microsoft. An attacker could exploit these vulnerabilities by creating a specially designed file that could allow a denial of service when it is received by the target system and its analysis by the engine protection against malicious software Microsoft.