A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in the JScript engine (JScript.dll) when parsing e.g. the "arguments" keyword. This can be exploited to corrupt memory when a user e.g. visits a specially crafted web page.

Successful exploitation may allow execution of arbitrary code.

NOTE: The vulnerability does not affect Windows Server 2008 R2 for x64-based or Itanium-based systems.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
ling&wushi of team509, reported via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS09-045 (KB971961):
http://www.microsoft.com/technet/security/Bulletin/MS09-045.mspx

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-09-062/

Deep Links
Links available to Secunia VIM customers