Reported June 29, 2005 by SEC Consult
Windows Server 2003
The JView Profiler
contains a flaw that might allow a remote intruder to take complete
control of an affected system.
Microsoft released a security bulletin, "Vulnerability in JView Profiler Could Allow Remote Code Execution (903235)," and associated patch to correct the problem. The patch sets a "kill bit" to prevent the object from being loaded via Internet Explorer.