Vulnerability Note VU#562788

Microsoft XML Core Services contain a buffer overflow in the XSLT component

An unspecified buffer overflow exists in the Microsoft implementation of XSLT. This vulnerability may allow an attacker to execute arbitrary code with the privileges of the user who is running Internet Explorer.

Note that an attacker would have to convince a user to visit a specially-crafted webpage to exploit this vulnerability.

II. Impact

Microsoft has released an update to address this issue. See Microsoft Security Bulletin MS06-061for more details.

Do not open web browsers with administrator privileges
Do not use an administrator account to browser the Internet. See the Before You Connect a New Computer to the Internet document for information on how to create an account with limited privileges. If logged in with administrator privileges, consider using the runas command to run Internet Explorer with reduced privileges.

Note that this workaround will not prevent exploitation of this vulnerability, but may reduce the immediate impact of successful exploitation.

Systems Affected

http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx
http://www.cert.org/tech_tips/before_you_plug_in.html#III
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx?mfr=true
http://blogs.technet.com/msrc/archive/2006/10/19/information-on-re-release-of-ms06-061.aspx

Credit

Thanks to Microsoft for supplying information about this vulnerability.

This document was written by Ryan Giobbi.

Other Information

If you have feedback, comments, or additional information about this vulnerability, please send us email.