MS12-022: Vulnerability in Expression Design could allow remote code execution: March 13, 2012

INTRODUCTION

Microsoft has released security bulletin MS12-022. To view the complete security bulletin, visit one of the following Microsoft websites:

Home users:
http://www.microsoft.com/security/pc-security/bulletins/201203.aspx
(http://www.microsoft.com/security/pc-security/bulletins/201203.aspx)
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
http://update.microsoft.com/microsoftupdate/
(http://update.microsoft.com/microsoftupdate/)
IT professionals:
http://technet.microsoft.com/security/bulletin/MS12-022
(http://technet.microsoft.com/security/bulletin/MS12-022)

Help protect your PC from viruses and malware:

(http://go.microsoft.com/fwlink/?LinkId=242148)

Help installing updates:

(http://go.microsoft.com/fwlink/?LinkId=242149)

Security solutions for IT Professionals:

(http://technet.microsoft.com/en-us/security/bb980617.aspx)

Local support by country:

(http://support.microsoft.com/common/international.aspx)

If you update Microsoft Expression Design or Expression Design 2 on a system that is running Windows XP, in some cases you may see a Command Prompt window momentarily appear and then disappear. This behavior is expected and does not indicate a problem with the update.
The Microsoft Expression Design update process will fail if the update is applied while Expression Design is running. To address this issue, exit the program and then reapply the update.
If you manually update Expression Design instead of using Windows Update, copy the update installer files to a local drive before you install. If you try to install from a network share, latency issues may occur. This can cause the installation to fail.

The following articles contain additional information about this security update as it relates to individual product versions.

2675064
(http://support.microsoft.com/kb/2675064/ )
: MS12-022: Description of the security update for Expression Design: March 13, 2012
2667724
(http://support.microsoft.com/kb/2667724/ )
: MS12-022: Description of the security update for Expression Design Service Pack 1: March 13, 2012
2667725
(http://support.microsoft.com/kb/2667725/ )
: MS12-022: Description of the security update for Expression Design 2: March 13, 2012
2667727
(http://support.microsoft.com/kb/2667727/ )
: MS12-022: Description of the security update for Expression Design 3: March 13, 2012
2667730
(http://support.microsoft.com/kb/2667730/ )
: MS12-022: Description of the security update for Expression Design 4: March 13, 2012