CVE

Id
21849  
CVE No.
CVE-2006-5745  
Status
Candidate  
Description
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20061106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
209193 21849 CVE-2006-5745 ISS:20061104 Vulnerability in Microsoft XML HTTP Request Handling  View
209194 21849 CVE-2006-5745 URL:http://www.iss.net/threats/239.html  View
209195 21849 CVE-2006-5745 MILW0RM:2743  View
209196 21849 CVE-2006-5745 URL:http://www.milw0rm.com/exploits/2743  View
209197 21849 CVE-2006-5745 MISC:http://xforce.iss.net/xforce/alerts/id/239  View
209198 21849 CVE-2006-5745 MISC:http://blogs.securiteam.com/?p=717  View
209199 21849 CVE-2006-5745 CONFIRM:http://www.microsoft.com/technet/security/advisory/927892.mspx  View
209200 21849 CVE-2006-5745 MS:MS06-071  View
209201 21849 CVE-2006-5745 URL:http://www.microsoft.com/technet/security/bulletin/ms06-071.mspx  View
209202 21849 CVE-2006-5745 CERT:TA06-318A  View
209203 21849 CVE-2006-5745 URL:http://www.us-cert.gov/cas/techalerts/TA06-318A.html  View
209204 21849 CVE-2006-5745 CERT-VN:VU#585137  View
209205 21849 CVE-2006-5745 URL:http://www.kb.cert.org/vuls/id/585137  View
209206 21849 CVE-2006-5745 BID:20915  View
209207 21849 CVE-2006-5745 URL:http://www.securityfocus.com/bid/20915  View
209208 21849 CVE-2006-5745 VUPEN:ADV-2006-4334  View
209209 21849 CVE-2006-5745 URL:http://www.vupen.com/english/advisories/2006/4334  View
209210 21849 CVE-2006-5745 OVAL:oval:org.mitre.oval:def:104  View
209211 21849 CVE-2006-5745 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:104  View
209212 21849 CVE-2006-5745 SECTRACK:1017157  View
209213 21849 CVE-2006-5745 URL:http://securitytracker.com/id?1017157  View
209214 21849 CVE-2006-5745 SECUNIA:22687  View
209215 21849 CVE-2006-5745 URL:http://secunia.com/advisories/22687  View
209216 21849 CVE-2006-5745 XF:ie-xml-http-request-handling(30004)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
58569 JVNDB-2006-000765 Mozilla 製品における XML.prototype.hasOwnProperty() メソッドにおけるメモリ破壊の脆弱性 Mozilla 製品 の XML.prototype.hasOwnProperty() メソッドに関する不備のため、メモリ領域が破壊される脆弱性が存在します。 CVE-2006-5747 21849 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000765.html  View