Microsoft has released two security updates for Windows 2000, XP, Server 2003, Vista, Server 2008 and Office 2003 and later. The patch described in Bulletin MS08-069 closes three holes in Microsoft’s XML Core Services 3.0, 4.0, 5.0 and 6.0. Microsoft has rated one of the errors as critical. The cause of vulnerability is a memory error that occurs when XML code is being parsed. It allows code to be injected and executed. This rating only applies to MSXML version 3.0, but in the other versions Microsoft still rates the threat as high.

Read the full article here