Microsoft XML Core Services Information Disclosure Vulnerability

Description

References

• securityfocus.com/bid/96069 · Broken Link
• securitytracker.com/id/1038014 · Broken Link
• 0patch.blogspot.com/2017/09/exploit-kit-rendezvous-and-cve-2017-0022.html · Exploit
• portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0022 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2017-0022

xml core services 的其他漏洞

• CVE-2016-0147高危 8.8Microsoft XML Core Services 3.0 allows remote attackers to execute arbitrary code via a crafted web site, aka "MSXML 3.0 Remote Code Executi…
• CVE-2015-2471中危 4.3Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protectio…
• CVE-2015-2440中危 4.3Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "M…
• CVE-2015-2434中危 4.3Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mech…
• CVE-2015-1646中危 4.3Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a …