CVEvulnerability
CVE-2006-5745
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-11-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
Description
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
Affected configurations
• microsoft xml core services 4.0
References
- http://blogs.securiteam.com/?p=717 blogs.securiteam.com
- http://secunia.com/advisories/22687 Vendor Advisory
- http://securitytracker.com/id?1017157 securitytracker.com
- http://www.iss.net/threats/239.html www.iss.net
- http://www.kb.cert.org/vuls/id/585137 US Government Resource
- http://www.microsoft.com/technet/security/advisory/927892.mspx www.microsoft.com
- http://www.securityfocus.com/bid/20915 Exploit
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4334 www.vupen.com
- http://xforce.iss.net/xforce/alerts/id/239 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30004 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104 oval.cisecurity.org
- https://www.exploit-db.com/exploits/2743 www.exploit-db.com
- http://blogs.securiteam.com/?p=717 blogs.securiteam.com
- http://secunia.com/advisories/22687 Vendor Advisory
- http://securitytracker.com/id?1017157 securitytracker.com
- http://www.iss.net/threats/239.html www.iss.net
- http://www.kb.cert.org/vuls/id/585137 US Government Resource
- http://www.microsoft.com/technet/security/advisory/927892.mspx www.microsoft.com
- http://www.securityfocus.com/bid/20915 Exploit
- http://www.us-cert.gov/cas/techalerts/TA06-318A.html US Government Resource
- http://www.vupen.com/english/advisories/2006/4334 www.vupen.com
- http://xforce.iss.net/xforce/alerts/id/239 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30004 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104 oval.cisecurity.org
- https://www.exploit-db.com/exploits/2743 www.exploit-db.com