Microsoft confirms new ‘zero-day’ vulnerability

New exploit found in Office Web Components; Jon Wilcox reports on the fifth zero-day hole since February.

Microsoft has announced the existence of a new zero-day vulnerability in the ActiveX controls of its Office Web Components.  The latest zero-day security hole is the fifth since February and potentially allows exploiters to attain the same user rights as the legitimate user.

Continued...