• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft XML Core Services SubstringData Integer Overflow Vulnerability

Solution:
Microsoft has released an advisory and fixes to address this issue. Please see the references for more information.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows XP Media Center Edition SP2

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows XP (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=dea6a48f-fb00 -43f3-a374-3220f9759c2d

Microsoft Windows Server 2003 Itanium SP1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Server 2003 Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Vista x64 Edition 0

• Microsoft Security Update for Windows Vista for x64-based Systems (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=928da3d2-b0b9 -447a-b37a-4350497fe563


• Microsoft Security Update for Windows Vista for x64-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0a465d77-a737 -4d26-82a1-570f9c788a8a

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows XP (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=dea6a48f-fb00 -43f3-a374-3220f9759c2d

Microsoft Word 2003 Viewer

• Microsoft Security Update for Office 2003 (KB936048)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=A339CB7B-E08A -47F8-AC0B-DF449191424A

Microsoft XML Core Services 6.0

• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976

Microsoft Office 2003 SP2

• Microsoft Security Update for Office 2003 (KB936048)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=A339CB7B-E08A -47F8-AC0B-DF449191424A

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Server 2003 Web Edition SP2

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows Vista Home Premium

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Windows Vista (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=14270529-3ae5 -43bf-a471-722ab010d81e


• Microsoft Security Update for Windows Vista (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c734d7de-5d87 -4904-81c3-714db2cb8b0d

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows Server 2003 x64 SP1

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=61bf00a9-aeea -431a-86d3-526a4a373bb7


• Microsoft Security Update for Windows XP x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b8862ca9-1203 -4056-a257-29271838ac0d

Microsoft Windows Vista Enterprise

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Windows Vista (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=14270529-3ae5 -43bf-a471-722ab010d81e


• Microsoft Security Update for Windows Vista (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c734d7de-5d87 -4904-81c3-714db2cb8b0d

Microsoft Windows XP Professional x64 Edition SP2

• Microsoft Security Update for Windows XP x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b8862ca9-1203 -4056-a257-29271838ac0d

Microsoft Windows Server 2003 Standard Edition

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows Vista 0

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Windows Vista (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=14270529-3ae5 -43bf-a471-722ab010d81e


• Microsoft Security Update for Windows Vista (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c734d7de-5d87 -4904-81c3-714db2cb8b0d

Microsoft Windows Vista Business

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Windows Vista (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=14270529-3ae5 -43bf-a471-722ab010d81e


• Microsoft Security Update for Windows Vista (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c734d7de-5d87 -4904-81c3-714db2cb8b0d

Microsoft Windows Server 2003 x64 SP2

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=61bf00a9-aeea -431a-86d3-526a4a373bb7


• Microsoft Security Update for Windows XP x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b8862ca9-1203 -4056-a257-29271838ac0d

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=61bf00a9-aeea -431a-86d3-526a4a373bb7


• Microsoft Security Update for Windows XP x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b8862ca9-1203 -4056-a257-29271838ac0d

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Security Update for Windows Server 2003 x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=61bf00a9-aeea -431a-86d3-526a4a373bb7


• Microsoft Security Update for Windows XP x64 Edition (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b8862ca9-1203 -4056-a257-29271838ac0d

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Office 2003 0

• Microsoft Security Update for Office 2003 (KB936048)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=A339CB7B-E08A -47F8-AC0B-DF449191424A

Microsoft Windows Vista Home Basic

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Windows Vista (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=14270529-3ae5 -43bf-a471-722ab010d81e


• Microsoft Security Update for Windows Vista (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c734d7de-5d87 -4904-81c3-714db2cb8b0d

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft XML Core Services 4.0

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows 2000 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=245214ea-76f9 -4755-8a14-a74232e20c1c

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Vista Ultimate

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Windows Vista (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=14270529-3ae5 -43bf-a471-722ab010d81e


• Microsoft Security Update for Windows Vista (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=c734d7de-5d87 -4904-81c3-714db2cb8b0d

3DM Software Disk Management Software SP2

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Office Compatibility Pack 2007 0

• Microsoft Security Update for the 2007 Microsoft Office System (KB936960)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7A97478A-832C -4A6B-B074-0E18B1E4ED33

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows Server 2003 Standard Edition SP2

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows XP Home SP2

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows XP (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=dea6a48f-fb00 -43f3-a374-3220f9759c2d

3DM Software Disk Management Software SP1

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows 2000 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=245214ea-76f9 -4755-8a14-a74232e20c1c

Microsoft Windows Server 2003 Itanium SP2

• Microsoft Security Update for Windows Server 2003 for Itanium-based Systems (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=b0285dd7-bf66 -4226-9948-26e8aae99046

Microsoft Windows Server 2003 Web Edition

• Microsoft Security Update for Microsoft XML Core Services 4.0 Service Pack 2 (KB936181)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=021E12F5-CB46 -43DF-A2B8-185639BA2807


• Microsoft Security Update for Microsoft XML Core Services 6.0 and Service Pack 1 (KB933579)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=70C92E77-9E5A -41B1-A9D2-64443913C976


• Microsoft Security Update for Windows Server 2003 (KB936021)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=12618ad0-aefd -4c9a-a769-4b14a7603d6e