Home / bulletins MS07-042 - Critical: Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (936227) - Version:4.0
Posted on 03 July 2008
CriticalSeverity Rating: Critical - Revision Note: V4.0 (June 24, 2008): Bulletin updated: Added Windows XP Service Pack 3, Windows Vista Service Pack 1, Windows Vista x64 Edition Service Pack 1, Windows Server 2008 for 32-bit Systems, Windows Server 2008 for x64-based Systems, and Windows Server 2008 for Itanium-based Systems as affected software. This is a detection update only. There were no changes to the binaries.Summary: This critical security update resolves a privately reported vulnerability. This vulnerability could allow remote code execution if a user viewed a specially crafted Web page using Internet Explorer. The vulnerability could be exploited through attacks on Microsoft XML Core Services. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
Other versions
- MS07-042 - Version: 1.0
- MS07-042 - Version: 1.1
- MS07-042 - Version: 2.0
- MS07-042 - Version: 3.0
- MS07-042 - Version: 4.0