CVEvulnerability

CVE-2013-0007

9.3 HIGH Published 2013-01-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-01-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-94

Description

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

Affected configurations

• microsoft xml core services 3.0 • microsoft xml core services 4.0 • microsoft xml core services 6.0 • microsoft windows 7 • microsoft windows 8 • microsoft windows server 2003 • microsoft windows server 2008 • microsoft windows server 2008 r2 • microsoft windows server 2012 • microsoft windows vista • microsoft windows xp • microsoft windows rt • microsoft xml core services 5.0 • microsoft expression web • microsoft expression web 2 • microsoft groove server 2007 • microsoft office 2003 • microsoft office 2007 • microsoft office compatibility pack • microsoft sharepoint server 2007 • microsoft word viewer

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References