Microsoft XML Core Service XMLHTTP ActiveX Control Remote Code Execution Vulnerability

Bugtraq ID: 20915
Class: Boundary Condition Error
CVE: CVE-2006-5745
Remote: Yes
Local: No
Published: Nov 03 2006 12:00AM
Updated: May 15 2007 08:48PM
Credit: The vendor credits Robert Freeman of ISS, and Dror Shalev and Moti Jospeh of Checkpoint with the discovery of this vulnerability.
Vulnerable: Microsoft XML Core Services 6.0
Microsoft XML Core Services 4.0
HP Storage Management Appliance 2.1
+ HP Storage Management Appliance III
+ HP Storage Management Appliance II
+ HP Storage Management Appliance I
Avaya S8100 Media Servers R9
Avaya S8100 Media Servers R8
Avaya S8100 Media Servers R7
Avaya S8100 Media Servers R6
Avaya S8100 Media Servers R12
Avaya S8100 Media Servers R11
Avaya S8100 Media Servers R10
Avaya S8100 Media Servers 0
+ Microsoft Windows 2000 Server
+ Microsoft Windows NT Server 4.0 SP6a
Avaya Messaging Application Server 0
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus