Microsoft Windows Explorer Web View Script Insertion Vulnerability

Description:
GreyMagic has discovered a vulnerability in Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an input validation error in the Web View library "webvw.dll" where certain metadata for files isn't properly sanitised before being used. This can be exploited to execute arbitrary HTML and script code in a local context with escalated privileges by e.g. tricking a user into selecting a malicious word document with a specially crafted author name in Windows Explorer.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been confirmed on a fully patched Microsoft Windows 2000 SP4 system.

Solution:
Disable Web content in folders:
"Tools" -> "Folder Options..." -> "General" --> "Use Windows classic folders"

Microsoft Windows XP is not affected.

posted by Unknown @ 16:45