{"vuid":"VU#562788","idnumber":"562788","name":"Microsoft XML Core Services contain a buffer overflow in the XSLT component","keywords":["Microsoft","XML","Core Services","remote code execution","XSLT processing","ms06-oct"],"overview":"The XSLT component of the Microsoft XML Core Services contains a buffer overflow. An attacker may be able to use this vulnerability to execute arbitrary code on a vulnerable system.","clean_desc":"Microsoft XML Core Services (MSXML) allow developers who use JScript, Visual Basic Scripting Edition (VBScript), and Microsoft Visual Studio 6.0 to create XML-based applications. Extensible Stylesheet Language Transformations (XSLT) is an XML language that can be used to manipulate and transform XML documents. Microsoft includes XSLT as a part of MSXML. An unspecified buffer overflow exists in the Microsoft implementation of XSLT. This vulnerability may allow an attacker to execute arbitrary code with the privileges of the user who is running Internet Explorer. Note that an attacker would have to convince a user to visit a specially-crafted webpage to exploit this vulnerability.","impact":"A remote, unauthenticated attacker may be able to execute arbitrary code with the privileges of the user who opened Internet Explorer.","resolution":"Update\nMicrosoft has released an update to address this issue. See Microsoft Security Bulletin MS06-061 for more details.","workarounds":"Do not open web browsers with administrator privileges Do not use an administrator account to browse the Internet. See the Before You Connect a New Computer to the Internet document for information about how to create an account with limited privileges. If logged in with administrator privileges, consider using the runas command to run Internet Explorer with reduced privileges. Note that this workaround will not prevent exploitation of this vulnerability, but it may reduce the immediate impact of successful exploitation.","sysaffected":"","thanks":"Thanks to Microsoft for supplying information about this vulnerability.","author":"This document was written by Ryan Giobbi.","public":["http://www.microsoft.com/technet/security/bulletin/ms06-061.mspx","http://www.cert.org/tech_tips/before_you_plug_in.html#III","http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx?mfr=true","http://blogs.technet.com/msrc/archive/2006/10/19/information-on-re-release-of-ms06-061.aspx"],"cveids":["CVE-2006-4686"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2006-10-10T19:08:18Z","publicdate":"2006-10-10T00:00:00Z","datefirstpublished":"2006-10-12T18:32:51Z","dateupdated":"2006-10-31T20:34:11Z","revision":18,"vrda_d1_directreport":"0","vrda_d1_population":"4","vrda_d1_impact":"4","cam_widelyknown":"13","cam_exploitation":"0","cam_internetinfrastructure":"6","cam_population":"19","cam_impact":"18","cam_easeofexploitation":"8","cam_attackeraccessrequired":"7","cam_scorecurrent":"6.8229","cam_scorecurrentwidelyknown":"9.3366","cam_scorecurrentwidelyknownexploited":"16.5186","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":6.8229,"vulnote":null}