Microsoft Xml Parser vulnerabilities
2 vulnerabilities
Known vulnerabilities in Microsoft Xml Parser, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2006-4686microsoftxml_core_services+1
EPSS score30.34%
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.CVE-2006-4685microsoftxml_core_services+1EPSS score20.70%
The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.