06.09.2009 - MS09-023 - Moderate: Vulnerability in Windows Search Could Allow Information Disclosure (963093)

Bulletin Severity Rating:Moderate - This security update resolves a privately reported vulnerability in Windows Search. The vulnerability could allow information disclosure if a user performs a search that returns a specially crafted file as the first result or if the user previews a specially crafted file from the search results. By default, the Windows Search component is not installed on Microsoft Windows XP and Windows Server 2003. It is an optional component available for download. Windows Search installed on supported editions of Windows Vista and Windows Server 2008 is not affected by this vulnerability. - View Microsoft Security Bulletin MS09-023 - View Microsoft Knowledge Base Article - 963093 - Visit Microsoft Corporation