| Package | Affected versions | Patched versions |
|---|---|---|
| internet explorer | = 6.0 | |
| sql server | = 2000 | |
| xml core services | = 2.6= 3.0= 4.0 |
XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free