⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2015-1646

MEDIUM · 4.3 CVSS Gepubliceerd: 14-04-2015 CWE-264

Beschrijving

Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."

Vendors

Microsoft

Affected products

Xml Core Services

References

www.securitytracker.com
docs.microsoft.com