07.190.2003 - MS03-024: Buffer Overrun in Windows Could Lead to Data Corruption (817606)

There is a flaw in the way the HTML converter for Microsoft Windows handles a conversion request during a cut-and-paste operation. A vulnerability exists because a specially crafted request to the HTML converter could cause the converter to fail in such a way that it could run code in the context of the currently logged-on user. Because Microsoft Internet Explorer uses this functionality, an attacker could craft a specially formed Web page or HTML e-mail that would cause the HTML converter to run arbitrary code on a user's computer. When a user visits an attacker’s Web site, the attacker could exploit the vulnerability without any other user action. - Download Windows XP Professional Patch - Download Windows XP 64-bit Edition Patch - Download Windows 2000 Patch - Download Windows NT 4.0 Patch - Download Windows NT 4.0 Server, Terminal Server Edition Patch - View Knowledge Base Article 817606 - View Microsoft Security Bulletin MS03-024 - View Microsoft End User Security Bulletin - Visit Microsoft Corporation