Secunia

Microsoft has issued an update for Windows. This fixes a vulnerability, allowing malicious websites to execute arbitrary code on a vulnerable system.

The vulnerability is caused due a boundary error within the Task Scheduler ("mstask.dll") when handling the "to be executed" field of ".job" files. This can be exploited to cause a stack-based buffer overflow when a folder containing a malicious ".job" file is viewed (e.g. by tricking a user into visiting a malicious website with a frame pointing to an anonymous share containing a specially crafted ".job" file).

The vulnerability affects Microsoft Windows 2000 and Windows XP. Microsoft Windows NT 4 is also affected if Internet Explorer 6 SP1 is installed.

Solution
Microsoft has released updates.
Further details available in Customer Area

Provided and/or discovered by
Microsoft credits the following with the discovery:
* Brett Moore of Security-Assessment.com
* Dustin Schneider
* Peter Winter-Smith of Next Generation Security Software

Changelog
Further details available in Customer Area

Original Advisory
MS04-022 (KB841873):
http://www.microsoft.com/technet/security/bulletin/ms04-022.mspx

NGSSoftware:
http://www.ngssoftware.com/advisories/mstaskjob.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area