Vulnerability in Microsoft Xml_core_services

CVE-2015-1646

Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."

EPSS: 0.170 (96.7th percentile) — read the EPSS interpretation.

Affected products

Microsoft Xml_core_services — versions 3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secure@microsoft.com (x_refsource_MS, vendor-advisory)
secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)