MS12-043 - Critical : Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution

Severity Rating: Critical Revision Note: V4.1 (January 30, 2013): Clarified that customers with the KB2687324 and KB2596679 updates will be offered the KB2687627 and KB2687497 updates respectively for Microsoft XML Core Services 5.0. See the update FAQ for details. Summary: This security update resolves a publicly disclosed vulnerability in Microsoft XML Core Services. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker would have no way to force users to visit such a website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker's website.

View this security bulletin