Microsoft KB Archive/925568

Knowledge Base

Microsoft Security Advisory: A vulnerability in Vector Markup Language (VML) could allow remote code execution in Windows

Article ID: 925568

Article Last Modified on 10/11/2007

---

APPLIES TO

• Microsoft Windows Server 2003, Standard Edition (32-bit x86)
• Microsoft Windows Server 2003, Enterprise Edition
• Microsoft Windows Server 2003, Web Edition
• Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
• Microsoft Windows Server 2003, Standard x64 Edition
• Microsoft Windows Server 2003, Enterprise x64 Edition
• Microsoft Windows Server 2003, Datacenter x64 Edition
• Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
• Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
• Microsoft Windows Server 2003 SP1, when used with:
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard x64 Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Server 2003, Datacenter x64 Edition
  • Microsoft Windows Server 2003, Datacenter Edition for Itanium-Based Systems
  • Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
• Microsoft Windows XP Service Pack 1, when used with:
  • Microsoft Windows XP Home Edition
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Media Center Edition 2002
  • Microsoft Windows XP Tablet PC Edition
• Microsoft Windows XP Tablet PC Edition 2005
• Microsoft Windows XP Media Center Edition 2005
• Microsoft Windows XP Service Pack 2, when used with:
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
• Microsoft Windows XP Professional x64 Edition
• Microsoft Windows 2000 Service Pack 4

---

SUMMARY

A vulnerability has been discovered in the Microsoft Windows implementation of Vector Markup Language (VML). Microsoft has released a Microsoft Security Advisory about this issue for IT professionals. This security advisory also contains additional security-related information. To view this security advisory, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/advisory/925568.mspx

Additional query words: security_advisory bug flaw hacker malicious attacker exploit registry unauthenticated buffer overrun overflow specially formed scope crafted denial of service DoS TSE

Keywords: kbtshoot kbsecvulnerability kbsecurity kbpubtypekc kbsecadvisory KB925568

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.