CVE-2006-5745
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
- Affected products
- Internet Explorer, Xml Core Services, Xmlhttp Activex Control
- Microsoft Xml Core Services
- = 4.0
- CVSS 2.0
- 7.6 HIGH
- EPSS
- 76.1% (100th percentile)
- NVD status
- Modified
- Published
- 2006-11-06
CVE-2006-5745 at NVD
10 known exploits for CVE-2006-5745
Proof-of-concept code and exploit modules indexed by Sploitus
Microsoft Internet Explorer - XML Core Services HTTP Request Handling (MS06-071) (Metasploit)
Internet Explorer XML Core Services HTTP Request Handling
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
Microsoft XMLHTTP ActiveX control setRequestHeader vulnerability
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (2)
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (3)
Microsoft Internet Explorer 6/7 - XML Core Services Remote Code Execution (1)
Immunity Canvas: MS06_071