Unscored severity · published Oct 10, 2006
CVE-2006-4686
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers…
–
CVSS
30.3%
EPSS
No
On KEV
Description
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
Exploitation
Is it being used?
Exploit prediction (EPSS)30.3% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XC
Xml Core Services · Microsoft
3.0; 4.0; 6.0 · source: NVD
XP
Xml Parser · Microsoft
2.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-4686
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-4686
secunia.com
http://secunia.com/advisories/22333
securitytracker.com
http://securitytracker.com/id?1017033
US Government Resource
http://www.kb.cert.org/vuls/id/562788
www.osvdb.org
http://www.osvdb.org/29426
www.securityfocus.com
http://www.securityfocus.com/archive/1/449179/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/20338
More from Xml Core Services
8.8
CVE-2012-1889
Microsoft XML Core Services Memory Corruption Vulnerability
6.5
CVE-2017-0022
Microsoft XML Core Services Information Disclosure Vulnerability
8.8
CVE-2016-0147
Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."
8.8
CVE-2013-0006
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka…
–
CVE-2015-2471
Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network…