Microsoft XML Core Services SubstringData Integer Overflow Vulnerability

Threat level definition

Microsoft XML Core Services SubstringData Integer Overflow Vulnerability

References:

Microsoft XML Resource Site (Microsoft)
iDefense Security Advisory 08.14.07: Microsoft XML Core Services XMLDOM Memory C (iDefense Labs )
MS07-042 XMLDOM substringData() PoC (alla@scanit.be)
ZDI-07-048: Microsoft Internet Explorer substringData Heap Overflow Vulnerabilit (zdi-disclosures@3com.com)
ASA-2007-356 MS07-042 Vulnerability in Microsoft XML Core Services Could Allow R (Avaya)
Microsoft Security Bulletin MS07-042 (Microsoft)
ZDI-07-048: Microsoft Internet Explorer substringData() Heap Overflow Vulnerabil (Zero Day Initiative)

Privacy Statement
Copyright 2008, SecurityFocus