Information disclosure in Microsoft Xml_core_services
CVE-2015-2440
Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability."
Vulnerability class: Information Disclosure
EPSS: 0.186 (96.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Xml_core_services — versions 3.0, 5.0, 6.0
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)