CVE-2015-1646 Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerabilit...
MediumCVSS 4.3
EPSS 16.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft xml core services | = 3.0 | No fix listed |