Used Microsoft XML 2.0 Core Services Vulnerability Patch for Windows? Share your experience and help other users.
Developer’s Description
A flaw exists in how the XMLHTTP control applies IE security zone settings to a redirected data stream returned in response to a request for data from a web site. A vulnerability results because an attacker could seek to exploit this flaw and specify a data source that is on the user's local system. The attacker could then use this to return information from the local system to the attacker's web site. An attacker would have to entice the user to a site under his control to exploit this vulnerability. It cannot be exploited by HTML email. In addition, the attacker would have to know the full path and file name of any file he would attempt to read. Finally, this vulnerability does not give an attacker any ability to add, change or delete data.
Used Microsoft XML 2.0 Core Services Vulnerability Patch for Windows? Share your experience and help other users.
Explore More
NoTracks Anti-Tracker
Trial version
Text Encrypt for WhatsApp for Windows 10
Free
Worry-Free Business Security Standard
Trial version
GFI EndPointSecurity
Trial versionMessage Smuggler
Trial version
DNS & DHCP Activity Monitor
Trial version
IPSwapper
Trial version
SX for Skype
FreeUSB Shutter (32-bit)
Free
GFI WebMonitor for ISA Server
Trial versionZhegui Single Sign On
Trial version
Bot Revolt
Trial version
