Secunia

Microsoft has issued patches to fix a vulnerability in the Windows Trouble Shooter ActiveX Control. This can be exploited by malicious HTML documents like web sites and emails to compromise a user's system.

The vulnerability is caused due to a boundary error in the Windows Trouble Shooter ActiveX Control's "RunQuery2" method. This can be exploited to cause a buffer overflow by supplying an overly long string to the first parameter. The ActiveX control is marked "safe for scripting" allowing any web site to reference it.

Successful exploitation allows execution of arbitrary code on a user's system.

The Windows Trouble Shooter ActiveX Control is installed by default on Windows 2000 systems.

Solution
Microsoft has issued patches:
Further details available in Customer Area

Provided and/or discovered by
Greg Jones, KPMG UK
Cesar Cerrudo

Changelog
Further details available in Customer Area

Original Advisory
Buffer Overflow in Windows Troubleshooter ActiveX Control Could Allow Code Execution
http://www.microsoft.com/technet/security/bulletin/MS03-042.asp

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area