MS10-051: Vulnerability in Microsoft XML Core Services could allow remote code execution

INTRODUCTION

Microsoft has released security bulletin MS10-051. To view the complete security bulletin, visit one of the following Microsoft websites:

Home users:
http://www.microsoft.com/security/updates/bulletins/201008.aspx
Skip the details: Download the updates for your home computer or laptop from the Microsoft Update website now:
http://update.microsoft.com/microsoftupdate/
IT professionals:
http://www.microsoft.com/technet/security/bulletin/ms10-051.mspx

How to obtain help and support for this security update

Help installing updates:
Support for Microsoft Update

Security solutions for IT professionals:
TechNet Security Troubleshooting and Support

Help protect your computer that is running Windows from viruses and malware:
Virus Solution and Security Center

Local support according to your country:
International Support

↑ Back to the top

More Information

More information about this security update

Known issues and more information about this security update

The following issue is fixed in this security update:

In Microsoft XML Core Services 3.0 (MSXML 3.0), there is a memory corruption issue in the handling of HTTP responses for the "Msxml2.XMLHTTP.3.0" ActiveX object. The corruption can occur in a random address. The address depends on the initial value of computer's memory and cannot be controlled by the attacker. All Windows versions of MSXML 3.0 are affected.

↑ Back to the top

FILE INFORMATION

The English (United States) version of this security update uses a Microsoft Windows Installer package to install the security update. The dates and the times for these files are listed in Coordinated Universal Time (UTC) in the following table. When you view the file information, the date is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Windows XP

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Msxml3.dll	8.100.1052.0	1,172,480	14-Jun-2010	07:41	x86	SP3	SP3GDR
Msxml3.dll	8.100.1052.0	1,172,480	14-Jun-2010	07:39	x86	SP3	SP3QFE

For all supported x86-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Msxml3.dll	8.100.1051.0	1,187,840	09-Jun-2010	08:11	x86	SP2	SP2GDR
Msxml3.dll	8.100.1051.0	1,187,840	09-Jun-2010	08:41	x86	SP2	SP2QFE

For all supported x64-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Msxml3.dll	8.100.1051.0	2,193,920	15-Jul-2010	23:05	x64	SP2	SP2GDR
Wmsxml3.dll	8.100.1051.0	1,187,840	15-Jul-2010	23:05	x86	SP2	SP2GDR\WOW
Msxml3.dll	8.100.1051.0	2,194,944	15-Jul-2010	22:04	x64	SP2	SP2QFE
Wmsxml3.dll	8.100.1051.0	1,187,840	15-Jul-2010	22:04	x86	SP2	SP2QFE\WOW

For all supported IA-based versions of Windows Server 2003

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Msxml3.dll	8.100.1051.0	3,551,744	15-Jul-2010	23:05	IA-64	SP2	SP2GDR
Wmsxml3.dll	8.100.1051.0	1,187,840	15-Jul-2010	23:05	x86	SP2	SP2GDR\WOW
Msxml3.dll	8.100.1051.0	3,551,744	15-Jul-2010	22:03	IA-64	SP2	SP2QFE
Wmsxml3.dll	8.100.1051.0	1,187,840	15-Jul-2010	22:03	x86	SP2	SP2QFE\WOW

For all supported x86-based versions of Windows Vista and Windows Server 2008

File name	File version	File size	Date	Time	Platform	SP Requirement	Service branch
Msxml3.dll	8.100.4002.0	1,257,472	11-Jun-2010	15:30	x86	SP1	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	09:41	x86	SP1	GDR
Msxml3.dll	8.100.4002.0	1,257,472	11-Jun-2010	15:25	x86	SP1	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	15:25	x86	SP1	LDR
Msxml3.dll	8.100.5003.0	1,248,768	11-Jun-2010	16:15	x86	SP2	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	09:41	x86	SP2	GDR
Msxml3.dll	8.100.5003.0	1,248,768	11-Jun-2010	16:31	x86	SP2	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	16:31	x86	SP2	LDR

For all supported x64-based versions of Windows Vista and Windows Server 2008

File name	File version	File size	Date	Time	Platform	SP requirement	Service branch
Msxml3.dll	8.100.4002.0	1,875,456	11-Jun-2010	16:08	x64	SP1	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	11:13	x64	SP1	GDR
Msxml3.dll	8.100.4002.0	1,875,968	11-Jun-2010	15:53	x64	SP1	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	15:53	x64	SP1	LDR
Msxml3.dll	8.100.5003.0	1,869,824	11-Jun-2010	16:38	x64	SP2	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	11:13	x64	SP2	GDR
Msxml3.dll	8.100.5003.0	1,869,824	11-Jun-2010	16:46	x64	SP2	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	16:46	x64	SP2	LDR
Msxml3.dll	8.100.4002.0	1,257,472	11-Jun-2010	15:30	x86	SP1	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	09:41	x86	SP1	GDR
Msxml3.dll	8.100.4002.0	1,257,472	11-Jun-2010	15:25	x86	SP1	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	15:25	x86	SP1	LDR
Msxml3.dll	8.100.5003.0	1,248,768	11-Jun-2010	16:15	x86	SP2	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	09:41	x86	SP2	GDR
Msxml3.dll	8.100.5003.0	1,248,768	11-Jun-2010	16:31	x86	SP2	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	16:31	x86	SP2	LDR

For all supported IA-64-based versions of Windows Server 2008

File name	File version	File size	Date	Time	Platform	SP Requirement	Service branch
Msxml3.dll	8.100.4002.0	3,164,160	11-Jun-2010	15:39	IA-64	SP1	GDR
Msxml3r.dll	8.20.8730.1	2,048	19-Jan-2008	08:13	IA-64	SP1	GDR
Msxml3.dll	8.100.4002.0	3,164,672	11-Jun-2010	15:25	IA-64	SP1	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	15:25	IA-64	SP1	LDR
Msxml3.dll	8.100.5003.0	3,164,160	11-Jun-2010	16:17	IA-64	SP2	GDR
Msxml3r.dll	8.20.8730.1	2,048	19-Jan-2008	08:13	IA-64	SP2	GDR
Msxml3.dll	8.100.5003.0	3,165,184	11-Jun-2010	16:25	IA-64	SP2	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	16:25	IA-64	SP2	LDR
Msxml3.dll	8.100.4002.0	1,257,472	11-Jun-2010	15:30	x86	SP1	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	09:41	x86	SP1	GDR
Msxml3.dll	8.100.4002.0	1,257,472	11-Jun-2010	15:25	x86	SP1	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	15:25	x86	SP1	LDR
Msxml3.dll	8.100.5003.0	1,248,768	11-Jun-2010	16:15	x86	SP2	GDR
Msxml3r.dll	8.20.8730.1	2,048	02-Nov-2006	09:41	x86	SP2	GDR
Msxml3.dll	8.100.5003.0	1,248,768	11-Jun-2010	16:31	x86	SP2	LDR
Msxml3r.dll	8.20.8730.1	2,048	11-Jun-2010	16:31	x86	SP2	LDR

For all supported x86-based versions of Windows 7

File name	File version	File size	Date	Time	Platform	Service branch
Msxml3.dll	8.110.7600.16605	1,233,920	08-Jun-2010	06:02	x86	GDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:07	x86	GDR
Msxml3.dll	8.110.7600.20728	1,233,920	08-Jun-2010	05:00	x86	LDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:07	x86	LDR

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform	Service branch
Msxml3.dll	8.110.7600.16605	1,877,504	08-Jun-2010	05:36	x64	GDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:30	x64	GDR
Msxml3.dll	8.110.7600.20728	1,877,504	08-Jun-2010	05:32	x64	LDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:30	x64	LDR
Msxml3.dll	8.110.7600.16605	1,233,920	08-Jun-2010	06:02	x86	GDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:07	x86	GDR
Msxml3.dll	8.110.7600.20728	1,233,920	08-Jun-2010	05:00	x86	LDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:07	x86	LDR

For all supported IA-64-based versions of Windows 7 and Windows Server 2008 R2

File name	File version	File size	Date	Time	Platform	Service branch
Msxml3.dll	8.110.7600.16605	3,144,192	08-Jun-2010	04:19	IA-64	GDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:37	IA-64	GDR
Msxml3.dll	8.110.7600.20728	3,144,192	08-Jun-2010	04:13	IA-64	LDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:37	IA-64	LDR
Msxml3.dll	8.110.7600.16605	1,233,920	08-Jun-2010	06:02	x86	GDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:07	x86	GDR
Msxml3.dll	8.110.7600.20728	1,233,920	08-Jun-2010	05:00	x86	LDR
Msxml3r.dll	8.110.7600.16385	2,048	14-Jul-2009	01:07	x86	LDR

↑ Back to the top

Keywords: kb, kbsurveynew, kbfix, kbbug, kbqfe, kbmustloc, kblangall, kbsecvulnerability, kbsecbulletin, kbsecurity, kbsecreview, kbexpertiseinter, kbarchive

↑ Back to the top

Article Info

Article ID	:	2079403
Revision	:	1
Created on	:	1/7/2017
Published on	:	7/18/2012
Exists online	:	False
Views	:	214

Microsoft KB Archive Search

MS10-051: Vulnerability in Microsoft XML Core Services could allow remote code execution

INTRODUCTION

How to obtain help and support for this security update

More Information

More information about this security update

Known issues and more information about this security update

FILE INFORMATION

For all supported x86-based versions of Windows XP

For all supported x86-based versions of Windows Server 2003

For all supported x64-based versions of Windows Server 2003

For all supported IA-based versions of Windows Server 2003

For all supported x86-based versions of Windows Vista and Windows Server 2008

For all supported x64-based versions of Windows Vista and Windows Server 2008

For all supported IA-64-based versions of Windows Server 2008

For all supported x86-based versions of Windows 7

For all supported x64-based versions of Windows 7 and Windows Server 2008 R2

For all supported IA-64-based versions of Windows 7 and Windows Server 2008 R2