April 2014 - Microsoft Releases 4 Security Advisories

Microsoft addresses the following vulnerabilities in its April batch of patches:

• (MS14-017) Vulnerabilities in Microsoft Word and Office Web Apps Could Allow Remote Code Execution (2949660)
  Risk Rating: Critical
  

  This security update resolves one publicly disclosed vulnerability and two privately reported vulnerabilities in Microsoft Office. The most severe of these vulnerabilities could allow remote code execution if a specially crafted file is opened or previewed in an affected version of Microsoft Office software.



• (MS14-018) Cumulative Security Update for Internet Explorer (2950467)
  Risk Rating: Critical
  

  This security update resolves six privately reported vulnerabilities in Internet Explorer. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Internet Explorer.



• (MS14-019) Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2922229)
  Risk Rating: Important
  

  This security update resolves a publicly disclosed vulnerability in Microsoft Windows. The vulnerability could allow remote code execution if a user runs specially crafted .bat and .cmd files from a trusted or semi-trusted network location.



• (MS14-020) Vulnerability in Microsoft Publisher Could Allow Remote Code Execution (2950145)
  Risk Rating: Important
  

  This security update resolves a privately reported vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user opens a specially crafted file in an affected version of Microsoft Publisher.