This host is missing a critical security update according to Microsoft Bulletin MS07-042.

Successful exploitation will allow the attacker to execute arbitrary code in the context of the user running the application. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms07-042.mspx

The flaw is due to an integer overflow error in the 'substringData()' method of an XMLDOM/TextNode JavaScript object.

Microsoft XML Core Services 3.0/4.0/5.0/6.0 Microsoft Windows 2K Service Pack 4 and prior. Microsoft Windows XP Service Pack 3 and prior. Microsoft Windows 2003 Service Pack 2 and prior. Microsoft Windows Vista Microsoft Office 2003 Service Pack 2. Microsoft Office 2007 Microsoft Office Compatibility Pack for Word/Excel/PowerPoint 2007 File Formats.

• http://secunia.com/advisories/26447/
• http://securitytracker.com/alerts/2007/Aug/1018559.html
• http://www.microsoft.com/technet/security/bulletin/ms07-042.mspx

---

Updated on 2015-03-25