CVE-2006-4686
HIGH severity · CVSS 7.5
7.5CVSS HIGH
Summary
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
Impact & exploitability
Attack vectorNetwork
Attack complexityLow
Privileges required—
User interaction—
Confidentiality impact—
Integrity impact—
Availability impact—
Exploit probability (EPSS)29%
AV:N/AC:L/Au:N/C:P/I:P/A:P
Affected products we track (1)
Recommendation
Apply the vendor fix promptly. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://secunia.com/advisories/22333
- http://securitytracker.com/id?1017033
- http://www.kb.cert.org/vuls/id/562788
- http://www.osvdb.org/29426
- http://www.securityfocus.com/archive/1/449179/100/0/threaded
- http://www.securityfocus.com/bid/20338
- http://www.vupen.com/english/advisories/2006/3980
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061