Used Microsoft XML 3.0 Core Services Vulnerability Patch for Windows? Share your experience and help other users.
Developer’s Description
A flaw exists in how the XMLHTTP control applies IE security zone settings to a redirected data stream returned in response to a request for data from a web site. A vulnerability results because an attacker could seek to exploit this flaw and specify a data source that is on the user's local system. The attacker could then use this to return information from the local system to the attacker's web site. An attacker would have to entice the user to a site under his control to exploit this vulnerability. It cannot be exploited by HTML email. In addition, the attacker would have to know the full path and file name of any file he would attempt to read. Finally, this vulnerability does not give an attacker any ability to add, change or delete data.
Used Microsoft XML 3.0 Core Services Vulnerability Patch for Windows? Share your experience and help other users.
Explore More
Trusteer Rapport
PaidTrusteer Apex
Paid
UltraHide Pro
Trial version
Desktop Secret Lock
Trial version
C4TLogger
Trial version
Folder Guardian
Free
O&O SafeErase
Trial version
MobiSecret
Trial versionTrusteer Management Application
Paid
Skype Audio Recorder
Trial version
Smart security system
Trial versionRSecure Software
Trial version
