PT-2006-6433 · Microsoft · Internet Explorer+2

Dror Shalev + 2 · Publicado 2006-11-06 · Atualizado 2021-04-09 · CVE-2006-5745

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft XML Core Services 4.0

Description: The issue is related to an unspecified vulnerability in the setRequestHeader method in the XMLHTTP ActiveX Control 4.0. This vulnerability can be exploited by remote attackers to execute arbitrary code via crafted arguments, leading to memory corruption. The vulnerability is specific to when the control is accessed by Internet Explorer.

Recommendations: For Microsoft XML Core Services 4.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2006-5745

Produtos afetados

Internet Explorer

Xml Core Services

Xmlhttp Activex Control

Referências · 20

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms06_071_xml_core.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16532 · Exploit
• 🔥 https://exploit-db.com/exploits/2753 · Exploit
• 🔥 https://exploit-db.com/exploits/2743 · Exploit
• 🔥 https://exploit-db.com/exploits/2749 · Exploit
• 🔥 http://securityfocus.com/bid/20915 · Exploit
• http://us-cert.gov/cas/techalerts/TA06-318A.html · Nota
• https://t.me/cvenotify/12999 · Publicação no Telegram
• http://xforce.iss.net/xforce/alerts/id/239 · Aviso do Fabricante
• http://blogs.securiteam.com/?p=717 · Nota
• http://microsoft.com/technet/security/advisory/927892.mspx · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30004 · Nota
• http://kb.cert.org/vuls/id/585137 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5745 · Nota de Segurança
• http://secunia.com/advisories/22687 · Aviso do Fabricante