MS12-022: Description of the security update for Expression Design 4: March 13, 2012

MS12-022: Description of the security update for Expression Design 4: March 13, 2012 INTRODUCTION Microsoft has released security bulletin MS12-022. To view the complete security bulletin, visit one of the following Microsoft websites: Home...

CVE-2012-0016: Undefined Security Weakness

Untrusted search path vulnerability in Microsoft Expression Design; Expression Design SP1; and Expression Design 2, 3, and 4 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .xpr or .DESIGN file, aka...