• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft XML Core Services DTD Cross Domain Information Disclosure Vulnerability

Solution:
Microsoft has released an advisory along with fixes to address this issue. Please see the references for more information.


Microsoft XML Core Services 4.0

• Microsoft MSXML 4.0 Service Pack 2 (KB954430)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=96a4413c-5261 -4f69-83d0-932c430abd14

Microsoft XML Core Services 3.0

• Microsoft Security Update for Windows 2000 (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=559cd4b6-24b7 -4e60-8749-37d9b833d3eb


• Microsoft Security Update for Windows Server 2003 (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0a0f8385-e908 -4b5f-b9bf-80b7dabfcafd


• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3a65e1cd-eb4e -44b6-8868-a5a84be2cb32


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=347c8c83-4269 -4a0e-af6f-4be2e824d22b


• Microsoft Security Update for Windows Server 2008 (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=90a04164-4d02 -4ce9-b3d8-bddb1ec27618


• Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4e0d1efe-70ac -459b-b330-c0149b74f520


• Microsoft Security Update for Windows Server 2008 x64 Edition (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b7bfe3f4-835f -402c-95b5-6d49b6935308


• Microsoft Security Update for Windows Vista (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=affbc957-1867 -4bbe-924d-6f0696ae0895


• Microsoft Security Update for Windows Vista for x64-based Systems (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b01a5f31-8c57 -4c5c-909e-b37caf0439b0


• Microsoft Security Update for Windows XP (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=6ed1a087-97e2 -4283-9b53-b7b046654d08


• Microsoft Security Update for Windows XP x64 Edition (KB955069)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1b79f220-ebfc -49c1-963b-58bbda21b6e7