136 matches found
Cross site scripting
Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, ...
MS08-069: Description of the security update for XML Core Services 6.0: November 11, 2008
None None...
Microsoft XML Core Services DTD Cross-Domain Scripting (MS08-069; CVE-2008-4029)
MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...
CVE-2007-2223
Microsoft XML Core Services (MSXML) 3.0–6.0 contains a vulnerability in the substringData() method on TextNode/XMLDOM objects that leads to an integer overflow and a subsequent buffer overflow, enabling remote code execution when a user is enticed to view a malicious page. The issue affects MSXML...
CVE-2007-2223: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft XML Core Services MSXML 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a 1 TextNode or 2 XMLDOM object, which causes an integer overflow that leads to a buffer overflow...
Microsoft XMLHTTP Control Open Method Code Execution (MS06-071; CVE-2006-5745)
XML HTTP, an ActiveX control that is included in Microsoft XML Core Services MSXML, is vulnerable to remote code execution. MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications...
Microsoft Internet Explorer 5/6 - MSXML XML File Parsing Cross-Site Scripting
source: https://www.securityfocus.com/bid/7938/info A vulnerability has been reported for the Microsoft Internet Explorer that may result in cross-site scripting attacks. If IE, using the MSXML parser, is unable to parse the requested XML file, it will display a parse error that also includes the...
Microsoft Internet Explorer 56 - MSXML XML File Parsing Cross-Site Scripting
Microsoft Internet Explorer 56 - MSXML XML File Parsing Cross-Site Scripting source: https://www.securityfocus.com/bid/7938/info A vulnerability has been reported for the Microsoft Internet Explorer that may result in cross-site scripting attacks. If IE, using the MSXML parser, is unable to parse...
MSXML (co-install of .net 3.0 sp1 x86)
...
Security Update for Windows Vista for x64-based Systems (KB936021)
A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...
MSXML (co-install of .net 3.0 sp1 x64)
...
MSXML 6 Pre-Req
...
MSXML 6.0 RTM Security Update (KB927977)
A vulnerability exists in the XMLHTTP ActiveX control within Microsoft XML Core Services that could allow for remote code execution...
Security Update for Windows Server 2003 x64 Edition (KB955069)
A security issue has been identified in the way Microsoft XML Core Services MSXML is handled that could allow an attacker to compromise a computer that is running Microsoft Windows and gain control over it. You can help protect your computer by installing this update from Microsoft. After you...
Security Update for Windows Vista for x64-based Systems (KB954459)
A security issue has been identified in Microsoft XML Core Services MSXML that could allow an attacker to compromise your Windows-based system and gain control over it. You can help protect your computer by installing this update from Microsoft. After you install this item, you may have to restar...