Microsoft XML Core Services Information Disclosure Vulnerabilities

Last Update Date: 14 Aug 2015 Release Date: 12 Aug 2015 3722 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

Multiple MSXML Information Disclosure Vulnerabilities
Information disclosure vulnerabilities exist when Microsoft XML Core Services (MSXML) explicitly allows the use of Secure Sockets Layer (SSL) 2.0. An attacker who successfully exploited these vulnerabilities could decrypt portions of encrypted network information traffic.
MSXML Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft XML Core Services (MSXML) exposes memory addresses not intended for public disclosure. An attacker could combine this information disclosure vulnerability to bypass Address Space Layout Randomization (ASLR). An attacker who successfully exploited this vulnerability could potentially read private data. The vulnerability would not allow an attacker to execute code or to elevate user rights directly, but the attacker could use it to obtain information in an attempt to further compromise the affected system.