(MS12-043) Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2722479)

Publish date: July 11, 2012
  Severity: CRITICAL
  CVE Identifier: CVE-2012-1889
  Advisory Date: JUL 11, 2012

  DESCRIPTION

This update resolves a vulnerability that exists in version of Microsoft XML Core Services that could allow remote code execution when successfully exploited. The vulnerability may be exploited by having a user view a specially crafted webpage using Internet Explorer.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION

  • Microsoft XML Core Services 3.0 (Windows XP Service Pack 3)
  • Microsoft XML Core Services 6.0 (Windows XP Service Pack 3)
  • Microsoft XML Core Services 4.0 (Windows XP Service Pack 3)
  • Microsoft XML Core Services 3.0 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows XP Professional x64 Edition Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Server 2003 Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Server 2003 Service Pack 2)
  • Microsoft XML Core Services 3.0 (Windows Server 2003 Service Pack 2)
  • Microsoft XML Core Services 3.0 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Server 2003 x64 Edition Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft XML Core Services 4.0 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft XML Core Services 3.0 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Microsoft XML Core Services 3.0 (Windows Vista Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Vista Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Vista Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft XML Core Services 3.0 (Windows Vista x64 Edition Service Pack 2)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Microsoft XML Core Services 6.0 (Windows 7 for 32-bit Systems)
  • Microsoft XML Core Services 4.0 (Windows 7 for 32-bit Systems)
  • Microsoft XML Core Services 3.0 (Windows 7 for 32-bit Systems)
  • Microsoft XML Core Services 3.0 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft XML Core Services 4.0 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows 7 for 32-bit Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows 7 for x64-based Systems)
  • Microsoft XML Core Services 4.0 (Windows 7 for x64-based Systems)
  • Microsoft XML Core Services 3.0 (Windows 7 for x64-based Systems)
  • Microsoft XML Core Services 3.0 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft XML Core Services 4.0 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows 7 for x64-based Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 R2 for x64-based Systems)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 R2 for Itanium-based Systems)
  • Microsoft XML Core Services 3.0 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft XML Core Services 4.0 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft XML Core Services 6.0 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Microsoft XML Core Services 5.0 (Microsoft Office 2003 Service Pack 3)
  • Microsoft XML Core Services 5.0 (Microsoft Office 2007 Service Pack 2)
  • Microsoft XML Core Services 5.0 (Microsoft Office 2007 Service Pack 3)
  • Microsoft XML Core Services 5.0 (Microsoft Office Word Viewer)
  • Microsoft XML Core Services 5.0 (Microsoft Office Compatibility Pack Service Pack 2)
  • Microsoft XML Core Services 5.0 (Microsoft Office Compatibility Pack Service Pack 3)
  • Microsoft XML Core Services 5.0 (Microsoft Expression Web Service Pack 1)
  • Microsoft XML Core Services 5.0 (Microsoft Expression Web 2)

Featured Stories