KLA10787 Code execution vulnerability in Micrsoft XML Core Services

An improper user input processing was found in Microsoft XML Core Services. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Original advisories CVE-2016-0147 Exploitation Related products...

CVE-2016-0147: Improper Input Validation

Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."...

MS16-040: Security Update for Microsoft XML Core Services (3148541)

The remote Windows host is affected by a remote code execution vulnerability in the Microsoft XML Core Services MSXML parser due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this vulnerability, by convincing a user to visit a specially-crafted...

KLA11916 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. An implementation vulnerability in Securi...

Microsoft XML Core Services Man-in-the-Middle Information Disclosure Vulnerability (CNVD-2015-05495)

Microsoft XML Core Services MSXML is a user to allow the use of JScript, VBScript and Visual Studio 6.0 users to develop XML-based applications , in order to interoperate with other applications that follow the XML 1.0 standard . A security vulnerability exists in Microsoft XML Core Services that...

CVE-2015-2440

Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability."...

CVE-2015-2434

Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than...

Information disclosure

Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability."...

CVE-2015-2440

CVE-2015-2440 affects Microsoft XML Core Services (MSXML) 3.0, 5.0 and 6.0. The issue enables remote attackers to bypass Address Space Layout Randomization (ASLR) and read private data via a crafted web site, i.e., an information-disclosure vulnerability. Public documentation ties this to MSXML c...

CVE-2015-2471

CVE-2015-2471 affects Microsoft XML Core Services 3.0, 5.0, and 6.0 which still support SSL 2.0. The root cause is the ability for a remote attacker to perform a decryption attack via SSL 2.0, leading to information disclosure. The connected documents describe the vulnerability and its disclosure...

PT-2015-5766

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services versions 3.0, 5.0, and 6.0 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack due to the support of SSL 2.0...

CVE-2015-2471: Undefined Security Weakness

Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than...

CVE-2015-2440: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability."...

CVE-2015-2434: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than...

Microsoft XML Core Services Man-in-the-Middle Information Disclosure Vulnerability

Microsoft XML Core Services MSXML is the United States Microsoft Microsoft company's set of services including SDK software development kit, which is mainly used for the implementation or development of applications designed by XML. An information disclosure vulnerability exists in Microsoft XML...

Microsoft XML Core Services Information Disclosure Vulnerability

Microsoft XML Core Services MSXML is the United States Microsoft Microsoft company's set of services including SDK software development kit, which is mainly used for the implementation or development of applications designed by XML. An information disclosure vulnerability exists in Microsoft XML...

Microsoft XML Core Services CVE-2015-2434 Man in the Middle Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. Attackers can exploit this issue to disclose potentially sensitive information through man-in-the-middle attacks. Technologies Affected Microsoft Office 2007 SP2 Microsoft Windows 7 for 32-bit Systems SP1...

Microsoft XML Core Services CVE-2015-2440 Information Disclosure Vulnerability

Description Microsoft XML Core Services is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information that may lead to further attacks. Technologies Affected Microsoft InfoPath 2007 SP3 Microsoft Office 2007 SP2 Microsoft Office 20...

PT-2015-5746

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services versions 3.0 and 5.0 Description The issue allows remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack. This is due to Microsoft XML Core Services...

PT-2015-5748

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services versions 3.0 through 6.0 Description An information disclosure issue exists when Microsoft XML Core Services exposes memory addresses not intended for public disclosure. This could allow an attacker to bypass Addres...