CVE-2015-2440

概要

参考情報

• securityfocus.com/bid/76232
• securitytracker.com/id/1033241
• zerodayinitiative.com/advisories/ZDI-15-381
• docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084

xml core services のその他の脆弱性

• CVE-2017-0022中 6.5悪用確認済み（CISA KEV）Microsoft XML Core Services (MSXML) in Windows 10 Gold, 1511, and 1607; Windows 7 SP1; Windows 8.1; Windows RT 8.1; Windows Server 2008 SP2 …
• CVE-2016-0147高 8.8Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Executi…
• CVE-2015-2471中 4.3Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protectio…
• CVE-2015-2434中 4.3Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mech…
• CVE-2015-1646中 4.3Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a …