ms11-061

The MS11-061 tag covers the August 2011 security update addressing a privately reported cross-site scripting (XSS) vulnerability in Remote Desktop Web Access. This vulnerability could allow elevation of privilege, enabling an attacker to execute arbitrary commands in the context of the target user. The update is rated Important. Notably, the XSS Filter in Internet Explorer 8 and Internet Explorer 9 prevents this attack for users browsing to a Remote Desktop Web Access server in the Internet Zone, but the filter is not enabled by default in the Intranet Zone. Discussions on WindowsForum.com focus on the bulletin details, severity, and mitigation considerations for enterprise environments.