Description
Cross-site scripting (XSS) vulnerability in the Indexing Service in Microsoft Windows 2000, XP, and Server 2003, when the Encoding option is set to Auto Select, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded URL, which is injected into an error message whose charset is set to UTF-7.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Microsoft Indexing Service - Query Validation Cross-Site Scripting EDB-28500 · remote · Sep 12, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20061002 IE UXSS (Universal XSS in IE, was Re: Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053]) mailing-list
- ms-indexing-service-xss(28651) vdb-entry
- oval:org.mitre.oval:def:535 vdb-entry signature
- ADV-2006-3564 vdb-entry
- VU#108884 third-party-advisory
- 1016826 vdb-entry
- TA06-255A third-party-advisory
- MS06-053 vendor-advisory
- 20061001 Microsoft Internet Information Services UTF-7 XSS Vulnerability [MS06-053] mailing-list
- http://www.geocities.jp/ptrs_sec/advisory09e.html
- 19927 vdb-entry
- SSRT061187 vendor-advisory
- 21861 third-party-advisory