Add or Remove Programs
entry for Security Update for Windows XP (KB920685)
. This security update for Windows XP addresses a vulnerability in the Indexing Service that could allow cross-site scripting.There is an information disclosure vulnerability in the Indexing Service because of the way that it handles query validation. The vulnerability could allow an attacker to run client-side script on behalf of a user. The script could spoof content, disclose information, or take any action that the user could take on the affected Web site.