CVEvulnerability
CVE-2006-4686
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-10-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
Affected configurations
• microsoft xml core services 3.0
• microsoft xml core services 4.0
• microsoft xml core services 6.0
• microsoft xml parser 2.6
References
- http://secunia.com/advisories/22333 secunia.com
- http://securitytracker.com/id?1017033 securitytracker.com
- http://www.kb.cert.org/vuls/id/562788 US Government Resource
- http://www.osvdb.org/29426 www.osvdb.org
- http://www.securityfocus.com/archive/1/449179/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20338 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3980 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A285 oval.cisecurity.org
- http://secunia.com/advisories/22333 secunia.com
- http://securitytracker.com/id?1017033 securitytracker.com
- http://www.kb.cert.org/vuls/id/562788 US Government Resource
- http://www.osvdb.org/29426 www.osvdb.org
- http://www.securityfocus.com/archive/1/449179/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20338 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/3980 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A285 oval.cisecurity.org