MS07-013: Vulnerability in Microsoft RichEdit could allow remote code execution

Microsoft has released security bulletin MS07-013. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  http://www.microsoft.com/athome/security/update/bulletins/200702.mspx
• IT professionals:
  http://www.microsoft.com/technet/security/bulletin/ms07-013.mspx

Windows Server 2003

The version numbers of the following two binaries that are included in Microsoft Windows Server 2003 Service Pack 2 (SP2) are lower than the version numbers that are included in the MS07-013 Windows Server 2003 security update (KB918118):

• RichEd20.dll
• Msftedit.dll

In both of the following scenarios, Windows Server 2003 will be updated with the security update that is mentioned in the MS07-013 security update (KB918118):

• Scenario 1
  
  You install Windows Server 2003 SP2, and you had not previously installed the MS07-013 security update.
• Scenario 2
  
  You install Windows Server 2003 SP2 after you install the MS07-013 security update.
  
  Note In this scenario, the binaries that are installed as part of the MS07-013 security update will remain on the system after you install Windows Server 2003 SP2.