10.15.2003 - MS03-042: Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code Execution (826232)

A security vulnerability exists in the Microsoft Local Troubleshooter ActiveX control. The vulnerability exists because the ActiveX control (Tshoot.ocx) contains a buffer overflow that could allow an attacker to run code of their choice on a user’s system. Because this control is marked "safe for scripting", an attacker could exploit this vulnerability by convincing a user to view a specially crafted HTML page that references this ActiveX control. The Microsoft Local Troubleshooter ActiveX control is installed as a default part of the operating system on Windows 2000. - Download Windows 2000 SP2 Patch - Download Windows 2000 SP3 & SP4 Patch - View Microsoft Knowledge Base Article - 826232 - View Microsoft Security Bulletin - View Microsoft End User Security Bulletin - Visit Microsoft Corporation