• info
• discussion
• exploit
• solution
• references

Microsoft Windows Search Script Injection Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.


Microsoft Windows Search 4.0

• Microsoft Security Update for Windows Server 2003 (KB963093)
  http://www.microsoft.com/downloads/details.aspx?familyid=e72ef31f-5161 -4fe6-8ed3-6206e02cef31


• Microsoft Security Update for Windows Server 2003 x64 Edition (KB963093)
  http://www.microsoft.com/downloads/details.aspx?familyid=7ffc3680-f9bf -423b-96a7-102f4cc9c240


• Microsoft Security Update for Windows XP (KB963093)
  http://www.microsoft.com/downloads/details.aspx?familyid=759f22cb-ea7f -49dd-a200-19cb83fffd8d


• Microsoft Security Update for Windows XP x64 Edition (KB963093)
  http://www.microsoft.com/downloads/details.aspx?familyid=50c56dd6-c34d -4632-a779-8bcf8fdb341b