A vulnerability has been discovered in Microsoft XML Core Services, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error in DOMNode::get_definition() as the value of a VARIANTARG in certain cases is left uninitialised after which it is dereferenced as an object pointer.

Successful exploitation allows execution of arbitrary code by e.g. tricking a user into viewing a malicious web page in Internet Explorer.

NOTE: The vulnerability is currently being actively exploited.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported as a 0-day.

Additional information provided by Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS12-043 (KB2722479, KB2719985, KB2721691, KB2721693, KB2687497, KB2596856, KB2687627):
http://technet.microsoft.com/en-us/security/bulletin/ms12-043

Microsoft:
http://technet.microsoft.com/en-us/security/advisory/2719615

Other references
Further details available to Secunia VIM customers

Technical Analysis
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers