Description
Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "MSXML Information Disclosure Vulnerability."
References
- 1033241 vdb-entry
- 76232 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-15-381
- MS15-084 vendor-advisory