PT-2006-5470 · Microsoft · Xmlhttp Activex Control+3

Ryan Giobbi · Published 2006-10-10 · Updated 2018-10-17 · CVE-2006-4685

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services versions 3.0 through 6.0 Microsoft XML Parser version 2.6

Description The issue arises from the XMLHTTP ActiveX control's improper handling of HTTP server-side redirects, allowing remote attackers to access content from other domains. This could lead to information disclosure when a user visits a specially crafted web page or clicks a link in a specially crafted email message. The vulnerability can be exploited through compromised web sites or those that host user-provided content, but user interaction is required. An attacker who successfully exploits this vulnerability could access content from another domain using the user's credentials.

Recommendations For Microsoft XML Core Services versions 3.0 through 6.0, update to a version that properly handles HTTP server-side redirects to prevent information disclosure. For Microsoft XML Parser version 2.6, update to a version that properly handles HTTP server-side redirects to prevent information disclosure. As a temporary workaround, consider restricting access to the XMLHTTP ActiveX control until a patch is available.

Fix

Related Identifiers

CVE-2006-4685

Affected Products

Xml Core Services

Xml Parser

Office

Xmlhttp Activex Control

References · 15

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4685 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4685 · Security Note
• http://securityfocus.com/archive/1/449179/100/0/threaded · Vendor Advisory
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:221 · Note
• http://vupen.com/english/advisories/2006/3980 · Note
• http://securityfocus.com/bid/20339 · Note
• http://securityfocus.com/archive/1/archive/1/449179/100/0/threaded · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2006/MS06-061 · Note
• http://frsirt.com/english/advisories/2006/3980 · Note
• http://securitytracker.com/id?1017033 · Note
• http://secunia.com/advisories/22333 · Note
• http://osvdb.org/29425 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A221 · Note
• http://kb.cert.org/vuls/id/547212 · Note