A
Multiple vulnerabilities exists in Windows Vista Feed Headlines
Gadgets, Contacts Gadget and Weather Gadgets. This vulnerabilities
could allow a remote anonymous attacker to run code with the privileges
of the logged on user.
Gadgets are mini-applications designed to
provide the user with information or utilities. Windows Vista treats
gadgets similar to the way Windows Vista treats all executable code.
Gadgets are written using HTML and script, but this HTML is not located
on an arbitrary remote server as web pages.
A Multiple vulnerabilities exists in Windows Vista Feed Headlines
Gadgets, Contacts Gadget and Weather Gadgets. The Gadget does not
perform sufficient validation when parsing HTML attributes. This
vulnerabilities could allow a remote anonymous attacker to run code
with the privileges of the logged on user.
