A memory corruption flaw exists in Microsoft XML Core Services. The issue is due to MSXML attempting to access an object in memory that has not been initialized, resulting in memory corruption. With a specially crafted web page, a context dependent attacker can execute arbitrary code.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Patch / RCS
Exploit:
Exploit Public,
Exploit Commercial,
Virus / Malware
Disclosure:
Vendor Verified,
Discovered in the Wild
OSVDB:
Web Related
Solution
Microsoft has released a patch to address this vulnerability. Additionally, it is possible to temporarily work around the flaw by implementing the following workaround: Apply the Microsoft Fix It solution described in knowledge base article 2719615 in the references section.
