07.31.2012 - MS12-043 - Critical : Vulnerability in Microsoft XML Core Services Could Allow Remote Code Execution (2722479) - Version: 1.1

Severity Rating: Critical Revision Note: V1.1 (July 31, 2012): Bulletin revised to announce a detection change in the Windows Vista packages for KB2719985 to correct a Windows Update reoffering issue. This is a detection change only. Customers who have already successfully updated their systems do not need to take any action. Summary: This security update resolves a publicly disclosed vulnerability in Microsoft XML Core Services. The vulnerability could allow remote code execution if a user views a specially crafted webpage using Internet Explorer. An attacker would have no way to force users to visit such a website. Instead, an attacker would have to convince users to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker's website. - View Microsoft Security Bulletin MS12-043 - View Microsoft Knowledge Base Article - on: 1. - Visit Microsoft Corporation