Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:xml_parser:2.6:*:*:*:*:*:*:*

part: a version: 2.6 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductXml Parser (fa438b48-2a42-5032-b1db-acc02aef874d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-4686 vulnerable 2026-06-08 04:49:18.554918 Details available
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
Published: 2006-10-10T22:00:00.000Z
Updated: 2024-08-07T19:23:40.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4685 vulnerable 2026-06-08 04:49:18.554374 Details available
The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
Published: 2006-10-10T22:00:00.000Z
Updated: 2024-08-07T19:23:41.072Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.