PT-2019-3039 · Microsoft · Msxml+2

Yuki Chen · Published 2019-08-13 · Updated 2026-02-20 · CVE-2019-1057

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services MSXML (affected versions not specified)

Description A remote code execution issue exists when the Microsoft XML Core Services MSXML parser processes user input. An attacker who successfully exploits this issue could run malicious code remotely to take control of the user’s system. To exploit the issue, an attacker could host a specially crafted website designed to invoke MSXML through a web browser. However, an attacker would have no way to force a user to visit such a website. Instead, an attacker would typically have to convince a user to either click a link in an email message or instant message that would then take the user to the website. When Internet Explorer parses the XML content, an attacker could run malicious code remotely to take control of the user’s system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

RCE

XXE

Code Injection

Weakness Enumeration

CWE-611

CWE-94

Related Identifiers

BDU:2019-03021

CVE-2019-1057

Affected Products

Internet Explorer

Msxml

Windows

References · 8

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1057 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1057 · Security Note
• https://bdu.fstec.ru/vul/2019-03021 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2019-1057 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-1057 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1057 · Security Note
• https://t.me/cvenotify/81434 · Telegram Post
• https://t.me/cveNotify/152661 · Telegram Post