• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Windows MHTML URI Buffer Overflow Vulnerability

Solution:
Microsoft has released a security bulletin to address this issue. Please see the attached security bulletin for details.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Outlook Express for Windows Server 2003 (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=0c7e507f-2a42 -49b5-82b2-84a6ec40b895

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=2aa6b4d1-a6eb -425b-ab7e-6cc27124a59e

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Outlook Express for Windows Server 2003 (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=0c7e507f-2a42 -49b5-82b2-84a6ec40b895

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Outlook Express for Windows XP (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=c9037cdb-3a57 -4db7-aa0d-5ad28730303a

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=8f062b1c-7b93 -4cb2-835a-b58ba29435f2

Microsoft Windows XP Home SP2

• Microsoft Security Update for Outlook Express for Windows XP (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=c9037cdb-3a57 -4db7-aa0d-5ad28730303a

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Outlook Express for Windows XP (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=c9037cdb-3a57 -4db7-aa0d-5ad28730303a

Microsoft Windows XP Professional x64 Edition

• Microsoft Security Update for Outlook Express for Windows XP x64 Edition (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=71f09617-d3cd -45fb-a09b-a9025c1d3f47

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Security Update for Outlook Express for Windows Server 2003 (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=0c7e507f-2a42 -49b5-82b2-84a6ec40b895

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Outlook Express for Windows Server 2003 (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=0c7e507f-2a42 -49b5-82b2-84a6ec40b895

Microsoft Windows XP Professional SP2

• Microsoft Security Update for Outlook Express for Windows XP (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=c9037cdb-3a57 -4db7-aa0d-5ad28730303a

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1

• Microsoft Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=8f062b1c-7b93 -4cb2-835a-b58ba29435f2

Microsoft Windows Server 2003 Standard x64 Edition

• Microsoft Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=2aa6b4d1-a6eb -425b-ab7e-6cc27124a59e

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB920214)
  http://www.microsoft.com/downloads/details.aspx?familyid=2aa6b4d1-a6eb -425b-ab7e-6cc27124a59e