Microsoft Windows Search Script Injection Vulnerability
BID:35220
Info
Microsoft Windows Search Script Injection Vulnerability
| Bugtraq ID: | 35220 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-0239 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2009 12:00AM |
| Updated: | Jun 10 2009 08:39PM |
| Credit: | Yair Amit of IBM Rational Application Security |
| Vulnerable: |
Microsoft Windows Search 4.0 |
| Not Vulnerable: | |
Discussion
Microsoft Windows Search Script Injection Vulnerability
Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results.
Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially sensitive information or perform other attacks.
The issue affects Windows Search installed on all supported editions of Windows XP and Windows Server 2003. Note that Windows Vista and Windows Server 2008 are not affected.
Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results.
Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially sensitive information or perform other attacks.
The issue affects Windows Search installed on all supported editions of Windows XP and Windows Server 2003. Note that Windows Vista and Windows Server 2008 are not affected.
Exploit / POC
Microsoft Windows Search Script Injection Vulnerability
To exploit this issue an attacker must entice an unsuspecting user to perform a search.
To exploit this issue an attacker must entice an unsuspecting user to perform a search.
Solution / Fix
Microsoft Windows Search Script Injection Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Microsoft Windows Search 4.0
Solution:
The vendor has released an advisory and fixes. Please see the references for details.
Microsoft Windows Search 4.0
-
Microsoft Security Update for Windows Server 2003 (KB963093)
http://www.microsoft.com/downloads/details.aspx?familyid=e72ef31f-5161 -4fe6-8ed3-6206e02cef31 -
Microsoft Security Update for Windows Server 2003 x64 Edition (KB963093)
http://www.microsoft.com/downloads/details.aspx?familyid=7ffc3680-f9bf -423b-96a7-102f4cc9c240 -
Microsoft Security Update for Windows XP (KB963093)
http://www.microsoft.com/downloads/details.aspx?familyid=759f22cb-ea7f -49dd-a200-19cb83fffd8d -
Microsoft Security Update for Windows XP x64 Edition (KB963093)
http://www.microsoft.com/downloads/details.aspx?familyid=50c56dd6-c34d -4632-a779-8bcf8fdb341b
References
Microsoft Windows Search Script Injection Vulnerability
References:
References:
- Microsoft Windows Homepage (Microsoft )
- MS09-023: Windows Search and MSHTML Host Apps (Microsoft)
- Windows Desktop Search �?? Indirect Script Injection (Yair Amit)
- Microsoft Security Bulletin MS09-023 (Microsoft)