View Definition

Definition Id: oval:org.mitre.oval:def:221 Version: 2  Last Modified: 2008-11-19
Title: Microsoft XML Core Services Vulnerability
Description: The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
Family: windows Class: vulnerability
Status: ACCEPTED Reference(s): CVE-2006-4685
Platform(s): Microsoft Windows 2000
Microsoft Windows XP
Microsoft Windows Server 2003
Product(s): Microsoft XML Core Services
Definition Synopsis: