Microsoft xml_core_services 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*
part: a version: 4.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Xml Core Services (11c4f5e1-37d7-5ca9-af82-162533a1e934) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0007 |
vulnerable | 2026-06-08 05:03:01.658472 |
Details available
Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."
Published: 2013-01-09T18:00:00.000Z
Updated: 2024-08-06T14:10:56.771Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0006 |
vulnerable | 2026-06-08 05:03:01.647062 |
Details available
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."
Published: 2013-01-09T18:00:00.000Z
Updated: 2025-01-16T20:51:20.538Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1889 |
vulnerable | 2026-06-08 05:00:51.240120 |
Details available
Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Published: 2012-06-13T01:00:00.000Z
Updated: 2025-10-22T00:05:47.142Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4033 |
vulnerable | 2026-06-08 04:50:37.547028 |
Details available
Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability."
Published: 2008-11-12T23:00:00.000Z
Updated: 2024-08-07T10:00:42.312Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-2223 |
vulnerable | 2026-06-08 04:49:44.347400 |
Details available
Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) TextNode or (2) XMLDOM object, which causes an integer overflow that leads to a buffer overflow.
Published: 2007-08-14T21:00:00.000Z
Updated: 2024-08-07T13:23:51.134Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5745 |
vulnerable | 2026-06-08 04:49:21.187839 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4686 |
vulnerable | 2026-06-08 04:49:18.554882 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4685 |
vulnerable | 2026-06-08 04:49:18.553358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2002-0057 |
vulnerable | 2026-06-08 04:46:20.522594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.