• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Windows HTML Help Control Cross-Zone Scripting Vulnerability

Solution:
Microsoft has released updates for supported platforms.

Fixes are also available for Microsoft Windows 98/98SE/ME may be obtained through Windows Update.

US-CERT has made an advisory available. Please see the reference for more information.

Nortel Networks has released security advisory 2005005435-1 addressing this issue. Please see the referenced advisory for further information.


Microsoft Windows XP Tablet PC Edition SP1

• Microsoft Security Update for Windows XP (KB890175) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D -4C0C-A26F-AAEDF163FEB7

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Windows XP (KB890175) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D -4C0C-A26F-AAEDF163FEB7

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 64-bit/Windows XP 64-bit Edition, Version 2003 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB -45A9-B5C2-234AD538D6CC

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Windows Server 2003 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=23E619FE-F6DB -4666-A247-339F55B059CC

Microsoft Windows XP 64-bit Edition SP1

• Microsoft Security Update for Windows XP 64-bit Edition (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1FC58C5F-3A97 -4B89-96C3-AAEFFCE28535

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Windows 2000 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=BE1B11C0-EF09 -4295-8FB2-0FF17BA65460

Microsoft Windows 2000 Professional SP3

• Microsoft Security Update for Windows 2000 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=BE1B11C0-EF09 -4295-8FB2-0FF17BA65460

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Windows Server 2003 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=23E619FE-F6DB -4666-A247-339F55B059CC

Microsoft Windows XP Home SP2

• Microsoft Security Update for Windows XP (KB890175) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D -4C0C-A26F-AAEDF163FEB7

Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Windows Server 2003 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=23E619FE-F6DB -4666-A247-339F55B059CC

Microsoft Windows 2000 Advanced Server SP3

• Microsoft Security Update for Windows 2000 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=BE1B11C0-EF09 -4295-8FB2-0FF17BA65460

Microsoft Windows XP Home SP1

• Microsoft Security Update for Windows XP (KB890175) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D -4C0C-A26F-AAEDF163FEB7

Microsoft Windows XP 64-bit Edition Version 2003 SP1

• Microsoft Security Update for Windows Server 2003 64-bit/Windows XP 64-bit Edition, Version 2003 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB -45A9-B5C2-234AD538D6CC

Microsoft Windows XP 64-bit Edition Version 2003

• Microsoft Security Update for Windows Server 2003 64-bit/Windows XP 64-bit Edition, Version 2003 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3B3878C9-57FB -45A9-B5C2-234AD538D6CC

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Windows XP (KB890175) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D -4C0C-A26F-AAEDF163FEB7

Microsoft Windows 2000 Professional SP4

• Microsoft Security Update for Windows 2000 (KB890175)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=BE1B11C0-EF09 -4295-8FB2-0FF17BA65460

Microsoft Windows XP Professional SP1

• Microsoft Security Update for Windows XP (KB890175) - English
  http://www.microsoft.com/downloads/details.aspx?FamilyId=43201B00-298D -4C0C-A26F-AAEDF163FEB7