Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
BID:57116
Info
Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
| Bugtraq ID: | 57116 |
| Class: | Unknown |
| CVE: |
CVE-2013-0006 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 08 2013 12:00AM |
| Updated: | Jan 08 2013 12:00AM |
| Credit: | Microsoft |
| Vulnerable: |
Microsoft XML Core Services 6.0 Microsoft XML Core Services 5.0 Microsoft XML Core Services 3.0 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows Server 2008 R2 Itanium SP1 Microsoft Windows Server 2008 R2 Itanium 0 Microsoft Windows Server 2008 R2 for x64-based Systems SP1 Microsoft Windows Server 2008 for x64-based Systems SP2 Microsoft Windows Server 2008 for x64-based Systems R2 Microsoft Windows Server 2008 for x64-based Systems 0 Microsoft Windows Server 2008 for Itanium-based Systems SP2 Microsoft Windows Server 2008 for Itanium-based Systems 0 Microsoft Windows Server 2003 x64 SP2 Microsoft Windows Server 2003 x64 SP1 Microsoft Windows Server 2003 Itanium SP2 Microsoft Windows Server 2003 Itanium SP1 Microsoft Windows Server 2003 Itanium 0 Microsoft Windows 7 for x64-based Systems SP1 Microsoft Windows 7 for x64-based Systems 0 Microsoft Office Compatibility Pack SP3 Microsoft Office Compatibility Pack SP2 Microsoft Office 2007 SP3 Microsoft Office 2007 SP2 Microsoft Office 2003 SP3 Microsoft Expression Web 2 Microsoft Expression Web 0 |
| Not Vulnerable: | |
Discussion
Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
Microsoft XML Core Services is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.
Microsoft XML Core Services is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-in user. Failed attacks will cause denial-of-service conditions.
Exploit / POC
Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
Solution:
Updates are available. Please see the references for more information.
Microsoft XML Core Services 3.0
Microsoft XML Core Services 6.0
Solution:
Updates are available. Please see the references for more information.
Microsoft XML Core Services 3.0
-
Microsoft Security Update for Windows 7 for x64-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=4b442601-2808 -4192-aa7d-b6476668cd23 -
Microsoft Security Update for Windows 8 for x64-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=c669190d-964c -42d3-b09d-40a397ae3a9c -
Microsoft Security Update for Windows Server 2003 x64 Edition (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=29985fdc-8aba -44b2-9420-970ca475052e -
Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=c11ec9cd-1a85 -4514-a1b9-9da5cdd0926b -
Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=e4dfbf88-0e7f -43ca-affe-5d8ddea8657e -
Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=cd979acf-ed95 -4d86-a046-ca7dc53523a3 -
Microsoft Security Update for Windows Server 2008 x64 Edition (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=1511377b-0adc -455f-8caa-f3498832c735 -
Microsoft Security Update for Windows Server 2012 (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=f7e434e5-1ce8 -4754-b9b4-07f3d84e0528 -
Microsoft Security Update for Windows Vista for x64-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=873eba5d-5a8f -410e-bad8-e9d538acf1b3 -
Microsoft Security Update for Windows XP x64 Edition (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=d147f865-6a56 -4db2-8d78-14f2bee6da18
Microsoft XML Core Services 6.0
-
Microsoft Security Update for Microsoft XML Core Services 6.0 Service Pack 2 (KB2758696)
http://www.microsoft.com/downloads/details.aspx?familyid=6a12de5f-de80 -48e4-8276-6c420f5a2948 -
Microsoft Security Update for Microsoft XML Core Services 6.0 Service Pack 2 for x64-based Systems (KB2758696)
http://www.microsoft.com/downloads/details.aspx?familyid=0b13a83c-1e51 -4604-a09d-afb2e25646f9 -
Microsoft Security Update for Windows 7 (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=3a160fc4-1bf0 -4db2-aa8d-6ba4f07d196b -
Microsoft Security Update for Windows 7 for x64-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=4b442601-2808 -4192-aa7d-b6476668cd23 -
Microsoft Security Update for Windows 8 (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=e19d1373-a3f3 -4f60-9142-c2484726aac8 -
Microsoft Security Update for Windows 8 for x64-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=c669190d-964c -42d3-b09d-40a397ae3a9c -
Microsoft Security Update for Windows Server 2008 (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=e6439fef-e5e7 -479b-8fc4-daacf3a39f3a -
Microsoft Security Update for Windows Server 2008 for Itanium-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=c11ec9cd-1a85 -4514-a1b9-9da5cdd0926b -
Microsoft Security Update for Windows Server 2008 R2 for Itanium-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=e4dfbf88-0e7f -43ca-affe-5d8ddea8657e -
Microsoft Security Update for Windows Server 2008 R2 x64 Edition (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=cd979acf-ed95 -4d86-a046-ca7dc53523a3 -
Microsoft Security Update for Windows Server 2008 x64 Edition (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=1511377b-0adc -455f-8caa-f3498832c735 -
Microsoft Security Update for Windows Server 2012 (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=f7e434e5-1ce8 -4754-b9b4-07f3d84e0528 -
Microsoft Security Update for Windows Vista (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=d477235d-60f4 -420d-8161-82194b4e62e7 -
Microsoft Security Update for Windows Vista for x64-based Systems (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=873eba5d-5a8f -410e-bad8-e9d538acf1b3 -
Microsoft Security Update for Windows XP (KB2757638)
http://www.microsoft.com/downloads/details.aspx?familyid=137cc5ee-abf0 -4a10-b1c4-d464331cbcfd
References
Microsoft XML Core Services CVE-2013-0006 Remote Code Execution Vulnerability
References:
References:
- Microsoft Windows Homepage (Microsoft )