您目前已離線,請等候您的網際網路重新連線

MS10-051:Microsoft XML Core Services 的弱點可能會允許遠端程式碼執行

簡介
Microsoft 已經發行資訊安全佈告欄 MS10-051。若要檢視完整的資訊安全佈告欄,請造訪下列其中一個 Microsoft 網站:

如何取得此安全性更新的說明及支援

如為家庭使用者,若位於美國或加拿大境內,可撥打 1-866-PCSAFETY 或連絡您當地的 Microsoft 分公司來取得免費支援。如需有關如何連絡當地的 Microsoft 分公司以尋求安全性更新的支援問題的詳細資訊,請造訪 Microsoft 世界各地技術支援網站: 北美洲的客戶也可以造訪下列 Microsoft 網站,即時存取無限制的免費電子郵件支援或無限制的個人聊天室支援: 如為企業客戶,可透過您平常的支援連絡方式取得安全性更新的支援。
其他相關資訊

此安全性更新的其他相關資訊

此安全性更新的已知問題和其他相關資訊

此安全性更新會修正下列問題:
  • 在 Microsoft XML Core Services 3.0 (MSXML 3.0) 中,「Msxml2.XMLHTTP.3.0」ActiveX 物件的 HTTP 回應處理有記憶體損毀的問題。損毀問題發生於隨機位址中,位址視電腦記憶體的初始值而定,無法由攻擊者控制。所有的 Windows 版 MSXML 3.0 都有受到影響。
檔案資訊
這個安全性更新的英文 (美國) 版會使用 Microsoft Windows Installer 套件來安裝安全性更新。下表中這些檔案的日期與時間是以 Coordinated Universal Time (UTC) 表示。當您檢視檔案資訊時,日期會轉換為當地時間。如果要查看 UTC 與當地時間的差異,請使用 [控制台] 中 [日期和時間] 項目的 [時區] 索引標籤。

關於所有支援的 Windows XP 之 x86 版本

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Msxml3.dll8.100.1052.01,172,48014-Jun-201007:41x86SP3SP3GDR
Msxml3.dll8.100.1052.01,172,48014-Jun-201007:39x86SP3SP3QFE

關於所有支援的 Windows Server 2003 之 x86 版本

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Msxml3.dll8.100.1051.01,187,84009-Jun-201008:11x86SP2SP2GDR
Msxml3.dll8.100.1051.01,187,84009-Jun-201008:41x86SP2SP2QFE

關於所有支援的 Windows Server 2003 之 x64 版本

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Msxml3.dll8.100.1051.02,193,92015-Jul-201023:05x64SP2SP2GDR
Wmsxml3.dll8.100.1051.01,187,84015-Jul-201023:05x86SP2SP2GDR\WOW
Msxml3.dll8.100.1051.02,194,94415-Jul-201022:04x64SP2SP2QFE
Wmsxml3.dll8.100.1051.01,187,84015-Jul-201022:04x86SP2SP2QFE\WOW

關於所有支援的 Windows Server 2003 之 IA 版本

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Msxml3.dll8.100.1051.03,551,74415-Jul-201023:05IA-64SP2SP2GDR
Wmsxml3.dll8.100.1051.01,187,84015-Jul-201023:05x86SP2SP2GDR\WOW
Msxml3.dll8.100.1051.03,551,74415-Jul-201022:03IA-64SP2SP2QFE
Wmsxml3.dll8.100.1051.01,187,84015-Jul-201022:03x86SP2SP2QFE\WOW

關於所有支援的 Windows Vista 和 Windows Server 2008 之 x86 版本

File nameFile versionFile sizeDateTimePlatformSP RequirementService branch
Msxml3.dll8.100.4002.01,257,47211-Jun-201015:30x86SP1GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200609:41x86SP1GDR
Msxml3.dll8.100.4002.01,257,47211-Jun-201015:25x86SP1LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201015:25x86SP1LDR
Msxml3.dll8.100.5003.01,248,76811-Jun-201016:15x86SP2GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200609:41x86SP2GDR
Msxml3.dll8.100.5003.01,248,76811-Jun-201016:31x86SP2LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201016:31x86SP2LDR

關於所有支援的 Windows Vista 和 Windows Server 2008 之 x64 版本

File nameFile versionFile sizeDateTimePlatformSP requirementService branch
Msxml3.dll8.100.4002.01,875,45611-Jun-201016:08x64SP1GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200611:13x64SP1GDR
Msxml3.dll8.100.4002.01,875,96811-Jun-201015:53x64SP1LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201015:53x64SP1LDR
Msxml3.dll8.100.5003.01,869,82411-Jun-201016:38x64SP2GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200611:13x64SP2GDR
Msxml3.dll8.100.5003.01,869,82411-Jun-201016:46x64SP2LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201016:46x64SP2LDR
Msxml3.dll8.100.4002.01,257,47211-Jun-201015:30x86SP1GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200609:41x86SP1GDR
Msxml3.dll8.100.4002.01,257,47211-Jun-201015:25x86SP1LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201015:25x86SP1LDR
Msxml3.dll8.100.5003.01,248,76811-Jun-201016:15x86SP2GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200609:41x86SP2GDR
Msxml3.dll8.100.5003.01,248,76811-Jun-201016:31x86SP2LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201016:31x86SP2LDR

關於所有支援的 Windows Server 2008 之 IA-64 版本

File nameFile versionFile sizeDateTimePlatformSP RequirementService branch
Msxml3.dll8.100.4002.03,164,16011-Jun-201015:39IA-64SP1GDR
Msxml3r.dll8.20.8730.12,04819-Jan-200808:13IA-64SP1GDR
Msxml3.dll8.100.4002.03,164,67211-Jun-201015:25IA-64SP1LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201015:25IA-64SP1LDR
Msxml3.dll8.100.5003.03,164,16011-Jun-201016:17IA-64SP2GDR
Msxml3r.dll8.20.8730.12,04819-Jan-200808:13IA-64SP2GDR
Msxml3.dll8.100.5003.03,165,18411-Jun-201016:25IA-64SP2LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201016:25IA-64SP2LDR
Msxml3.dll8.100.4002.01,257,47211-Jun-201015:30x86SP1GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200609:41x86SP1GDR
Msxml3.dll8.100.4002.01,257,47211-Jun-201015:25x86SP1LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201015:25x86SP1LDR
Msxml3.dll8.100.5003.01,248,76811-Jun-201016:15x86SP2GDR
Msxml3r.dll8.20.8730.12,04802-Nov-200609:41x86SP2GDR
Msxml3.dll8.100.5003.01,248,76811-Jun-201016:31x86SP2LDR
Msxml3r.dll8.20.8730.12,04811-Jun-201016:31x86SP2LDR

關於所有支援的 Windows 7 之 x86 版本 

File nameFile versionFile sizeDateTimePlatformService branch
Msxml3.dll8.110.7600.166051,233,92008-Jun-201006:02x86GDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:07x86GDR
Msxml3.dll8.110.7600.207281,233,92008-Jun-201005:00x86LDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:07x86LDR

關於所有支援的 Windows 7 和 Windows Server 2008 R2 之 x64 版本

File nameFile versionFile sizeDateTimePlatformService branch
Msxml3.dll8.110.7600.166051,877,50408-Jun-201005:36x64GDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:30x64GDR
Msxml3.dll8.110.7600.207281,877,50408-Jun-201005:32x64LDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:30x64LDR
Msxml3.dll8.110.7600.166051,233,92008-Jun-201006:02x86GDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:07x86GDR
Msxml3.dll8.110.7600.207281,233,92008-Jun-201005:00x86LDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:07x86LDR

關於所有支援的 Windows 7 和 Windows Server 2008 R2 之 IA-64 版本

File nameFile versionFile sizeDateTimePlatformService branch
Msxml3.dll8.110.7600.166053,144,19208-Jun-201004:19IA-64GDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:37IA-64GDR
Msxml3.dll8.110.7600.207283,144,19208-Jun-201004:13IA-64LDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:37IA-64LDR
Msxml3.dll8.110.7600.166051,233,92008-Jun-201006:02x86GDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:07x86GDR
Msxml3.dll8.110.7600.207281,233,92008-Jun-201005:00x86LDR
Msxml3r.dll8.110.7600.163852,04814-Jul-200901:07x86LDR
update security_patch security_update security bug flaw vulnerability malicious attacker exploit registry unauthenticated buffer overrun overflow specially-formed scope specially-crafted denial of service DoS TSE
內容

文章識別碼:2079403 - 最後檢閱時間:06/02/2011 01:01:00 - 修訂: 3.0

  • Microsoft XML Core Services 3.0
  • kbexpertiseinter kbsecurity kbsecbulletin kbsecvulnerability kbqfe kbbug kbfix kbsurveynew KB2079403
意見反應