Lucene search
HistoryAug 15, 2015 - 12:59 a.m.
CVE-2015-2440
cve-2015-2440
microsoft xml core services
aslr bypass
crafted web site
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.728 High
EPSS
Percentile
98.1%
Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka “MSXML Information Disclosure Vulnerability.”
Affected configurations
Node
microsoftxml_core_servicesMatch3.0
ORmicrosoftxml_core_servicesMatch5.0
ORmicrosoftxml_core_servicesMatch6.0
Related
cvelist
cvelist
CVE-2015-2440
2015-08-15 00:00:00
nvd
nvd
CVE-2015-2440
2015-08-15 00:59:12
zdi
zdi
Microsoft MSXML generate-id Information Disclosure Vulnerability
2015-08-11 00:00:00
symantec
symantec
prion
prion
Information disclosure
2015-08-15 00:59:00
openvas
openvas
mskb
mskb
nessus
nessus
kaspersky
kaspersky
KLA10646 Multiple vulnerabilities in Microsoft Windows
2015-08-11 00:00:00
securityvulns
securityvulns
Microsoft Windows multiple security vulnerabilities
2015-08-24 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.728 High
EPSS
Percentile
98.1%
Related for CVE-2015-2440