Microsoft Windows 2000 Update: OLE DB Provider Security Vulnerability

The Microsoft Data Access Component Internet Publishing Provider provides access to WebDAV resources over the Internet. By design, it should differentiate between requests made by a user and those made by script running in the user's browser. However, because of an implementation flaw, it handles all requests in the security context of the user. As a result, if a user browsed to a web page or opened an HTML e-mail that contained script, that script could access web-based resources as the user.

Requirements:

• Windows NT 4 SP 6
• Windows 2003 SP 1
• Windows XP AMD 64-bit
• Windows XP 64-bit SP 1
• Windows NT 4 SP 2
• Windows 2000 SP 1
• Windows 2003 64-bit
• Windows 2003 AMD 64-bit
• Windows XP 64-bit SP 2
• Windows NT 4 SP 3
• Windows 2000 SP 2
• Windows Server 2003 x64 R2
• Windows 2000
• Windows 2003 64-bit SP 1
• Windows Vista AMD 64-bit
• Windows XP Itanium 64-bit
• Windows NT 4 SP 4
• Windows 2000 SP 3
• Windows NT 4
• Windows XP 32-bit
• Windows XP SP 1
• Windows Server 2003 x86 R2
• Windows ME
• Windows 2003 Itanium 64-bit
• Windows NT 4 SP 5
• Windows 2000 SP 4
• Windows Vista 32-bit
• Windows XP 64-bit
• Windows NT 4 SP 1
• Windows Server 2008 x64
• Windows NT 3
• Windows Server 2008 x86
• Windows XP
• Windows Server 2008
• Windows 2003
• Windows Vista Itanium 64-bit
• Windows XP Itanium 64-bit SP 1
• Windows 2003 32-bit
• Windows XP Itanium 64-bit SP 2
• Windows XP SP 2
• Windows 95
• Windows 98
• Windows Vista
• Windows NT
• Windows 2003 Itanium 64-bit SP 1
• Windows XP Pro