|
|
|
 Microsoft UpdateScan your computer for Windows and Office updates that you need Security Update for Windows XP Embedded with SP1 (825119)Brief DescriptionThis update addresses MS03-044: Buffer Overrun in Windows Help and Support Center Could Lead to System Compromise (825119) On This PageQuick Details
OverviewA security vulnerability exists in the Help and Support Center function which ships with Windows XP and Windows Server 2003. The affected code is also included in all other supported Windows operating systems, although no known attack vector has been identified at this time because the HCP protocol is not supported on those platforms. The vulnerability results because a file associated with the HCP protocol contains an unchecked buffer.
An attacker could exploit the vulnerability by constructing a URL that, when clicked on by the user, could execute code of the attacker’s choice in the Local Computer security context. The URL could be hosted on a web page, or sent directly to the user in email. In the web based scenario, where a user then clicked on the URL hosted on a website, an attacker could have the ability to read or launch files already present on the local machine. The risk of attack from the HTML email vector can be significantly reduced if the following conditions are met:
YOU MAY NOT PROVIDE THIS UPDATE OR THE LOCATION (URL) OF THIS UPDATE TO ANY THIRD PARTIES. System Requirements
InstructionsImportant: This QFE requires Repository look-up may cause incorrect files to be copied (Q811279) be installed prior to this fix.
Some of the .sld files may also require importing new repository objects. The new repositories will be created on the repository root holding the main Windows XP Embedded with Service Pack 1 repository. For information on moving repositories to other locations, see Moving a Repository in your Windows Embedded Studio documentation. After importing this update into your database, add one of the following components to your configuration(s) if you wish to use this update:
See Importing Components into the Database for more information. Files in This DownloadThe links in this section correspond to separate files available in this download. Download the files most appropriate for you.
|
|||||||||||||||||||||||
