Unscored severity · published Nov 6, 2006
CVE-2006-5745
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet…
–
CVSS
77.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)77.6% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XC
Xml Core Services · Microsoft
4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5745
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5745
blogs.securiteam.com
http://blogs.securiteam.com/?p=717
Vendor Advisory
http://secunia.com/advisories/22687
securitytracker.com
http://securitytracker.com/id?1017157
www.iss.net
http://www.iss.net/threats/239.html
US Government Resource
http://www.kb.cert.org/vuls/id/585137
www.microsoft.com
http://www.microsoft.com/technet/security/advisory/927892.mspx
More from Xml Core Services
8.8
CVE-2012-1889
Microsoft XML Core Services Memory Corruption Vulnerability
6.5
CVE-2017-0022
Microsoft XML Core Services Information Disclosure Vulnerability
8.8
CVE-2016-0147
Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Execution Vulnerability."
8.8
CVE-2013-0006
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka…
–
CVE-2015-2471
Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network…