Skip to content
OpenAdvisories
Unscored CVE-2015-1646 EUVD-2015-1776GHSA-mqc5-2j69-wp37

Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a…

Published Apr 14, 2015 · Updated Aug 6, 2024 · Assigned by microsoft

Description

Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."

References