Microsoft includes new advisories in April security update

Microsoft released two security advisories that included solutions April 13 as part of its massive April security update. Along with the 17 security bulletins in the April patch, Microsoft released a tool to help protect older versions of Office, as well as an update to the winload.exe program.

The Office File Validation tool scans and validates Word files in Office 2003 and Office 2007, checking for malformed files employed by hackers to spread malware. This feature, which installs as an Office add-in, already comes standard in Microsoft Office 2010.

According to Microsoft, the Office File Validation tool is designed to thwart so-called "file format attacks" that could lead to elevation-of-privilege exploits. "File format attacks exploit the integrity of a file, and occur when the structure of a file is modified with the intent of adding malicious code," according to Microsoft's explanation. "Usually the malicious code is run remotely and is used to elevate the privilege of restricted accounts on the computer."