KLA10558 Obtain sensitive information vulnerability in MSXML

An unspecified vulnerability was found in Microsoft XML Core Services. By exploiting this vulnerability malicious users can bypass security restrictions or obtain sensitive information. This vulnerability can be exploited remotely via a specially designed DTD.

Original advisories

MS15-039

CVE-2015-1646

Related products

Microsoft-XML-Core-Services

CVE list

CVE-2015-1646 warning

KB list

3046482

Solution

Update to the latest version

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

Affected Products

• Microsoft XML Core Services version 3.0