Microsoft XMLHTTP Control Open Method Code Execution (MS06-071; CVE-2006-5745)

XML HTTP, an ActiveX control that is included in Microsoft XML Core Services MSXML, is vulnerable to remote code execution. MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications...

CVE-2006-5745

A memory corruption vulnerability exists in the XMLHTTP ActiveX Control within Microsoft XML Core Services 4.0 on Windows. When accessed by Internet Explorer , processing a specially crafted argument passed to the setRequestHeader method can allow a remote attacker to execute arbitrary code or ca...