CVE-2006-4686 Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary c...
HighCVSS 7.5
EPSS 30.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft xml core services | = 3.0 | No fix listed |
| Microsoft xml core services | = 4.0 | No fix listed |
| Microsoft xml core services | = 6.0 | No fix listed |
| Microsoft xml parser | = 2.6 | No fix listed |
References
- 22333 third-party-advisory
- 1017033 vdb-entry
- VU#562788 third-party-advisory us-government-resource
- 29426 vdb-entry
- SSRT061264 vendor-advisory
- 20338 vdb-entry
- ADV-2006-3980 vdb-entry
- MS06-061 vendor-advisory
- oval:org.mitre.oval:def:285 signature vdb-entry