CVE:CVE-2013-0007
CNNVD:CNNVD-201301-100
Microsoft XML Core Services（MSXML）是美国微软（Microsoft）公司的一组包含SDK软件开发套件的服务，它主要用于执行或开发由XML所设计的应用程序。
Microsoft XML Core Services (又名MSXML) 4.0，5.0以及6.0版本中存在漏洞，该漏洞源于没有正确解析XML内容。通过特制的网页，远程攻击者利用该漏洞执行任意代码。又名‘MSXML XSLT漏洞’。
solution:Upgrade microsoft xml_core_services to a higher version than 3.0,4.0,6.0,5.0,and avoid the version 3.0,4.0,6.0,5.0; Upgrade microsoft windows_7 to a higher version than -,-:sp1,and avoid the version -:sp1; Upgrade microsoft windows_8 to a higher version than -; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2008 to a higher version than -:sp2,r2,*:sp2,and avoid the version -:sp2,r2,*:sp2; Upgrade microsoft windows_server_2012 to a higher version than -; Upgrade microsoft windows_vista to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than -:sp2,*:sp3,and avoid the version -:sp2,*:sp3; Upgrade microsoft windows_rt to a higher version than -; Upgrade microsoft expression_web to a higher version than *:sp1,2,and avoid the version *:sp1,2; Upgrade microsoft groove_server to a higher version than 2007:sp2,2007:sp3,and avoid the version 2007:sp2,2007:sp3; Upgrade microsoft office to a higher version than 2003:sp3,2007:sp2,2007:sp3,and avoid the version 2003:sp3,2007:sp2,2007:sp3; Upgrade microsoft office_compatibility_pack to a higher version than *:sp2,*:sp3,and avoid the version *:sp2,*:sp3; Upgrade microsoft sharepoint_server to a higher version than 2007:sp2,2007:sp3,and avoid the version 2007:sp2,2007:sp3; Upgrade microsoft word_viewer to a higher version than *