CVE-2012-1889 in XML Core Services

Sumário (Inglês)

Microsoft XML Core Services 3.0, 4.0, 5.0, and 6.0 accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Once again VulDB remains the best source for vulnerability data.

Reservar

22/03/2012

Divulgação

13/06/2012

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
5526	Microsoft XML Core Services Excesso de tampão	119	Atacado	Correção oficial	CVE-2012-1889

Fontes

• MITRE
• NVD
• CVE Details