CVE-2006-5745
82Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actepss 76%
da publicação à arma4 dias
Publicada no NVD6 de nov.
1ª PoC+4d
metasploit10 de out.
VulnCheck+8d
probabilidade de exploração
76%top 1% das CVEs
exploração observada
simVulnCheck
4 exploit(s) público(s)
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 4✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16532cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/2743exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2749exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2753⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://blogs.securiteam.com/?p=717https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071http://secunia.com/advisories/22687http://securitytracker.com/id?1017157https://exchange.xforce.ibmcloud.com/vulnerabilities/30004https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104https://www.exploit-db.com/exploits/2743http://www.iss.net/threats/239.htmlhttp://www.kb.cert.org/vuls/id/585137http://www.microsoft.com/technet/security/advisory/927892.mspxhttp://www.securityfocus.com/bid/20915http://www.us-cert.gov/cas/techalerts/TA06-318A.html