CVE-2006-5745

HIGH 7.6CVE-2006-5745 · Published 06/11/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
xml core services microsoft	`= 4.0`	No fix yet

Description

Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.

References

blogs.securiteam.com
secunia.com/advisories/22687 · Vendor Advisory
securitytracker.com/id
iss.net/threats/239.html
kb.cert.org/vuls/id/585137 · US Government Resource
microsoft.com/technet/security/advisory/927892.mspx
securityfocus.com/bid/20915 · Exploit
us-cert.gov/cas/techalerts/TA06-318A.html · US Government Resource
vupen.com/english/advisories/2006/4334
xforce.iss.net/xforce/alerts/id/239 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071
exchange.xforce.ibmcloud.com/vulnerabilities/30004
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104
exploit-db.com/exploits/2743

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free