Description
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."
Advisories 1
- ICSA-20-315-01 ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA CISA ICS & IT advisories · Nov 10, 2020
References
- TA13-008A third-party-advisory
- MS13-002 vendor-advisory
- oval:org.mitre.oval:def:16429 vdb-entry signature
- https://us-cert.cisa.gov/ics/advisories/icsa-20-315-01