This critical security update resolves a privately reported vulnerability. This
vulnerability could allow remote code execution if a user viewed a specially
crafted Web page. The vulnerability could be exploited through attacks on
Object Linking and Embedding (OLE) Automation. Users whose accounts are
configured to have fewer user rights on the system could be less impacted
than users who operate with administrative user rights.