Remote Code Execution Vulnerability in Microsoft XML Core Services ActiveX Control
CVE-2006-5745
Currently unrated
Key Information:
- Vendor
Microsoft
- Status
- Vendor
- CVE Published:
- 6 November 2006
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 76%
What is CVE-2006-5745?
An unaddressed flaw exists in the setRequestHeader method within the XMLHTTP ActiveX Control in Microsoft XML Core Services 4.0, which is accessible through Internet Explorer. This vulnerability enables remote attackers to execute arbitrary code by providing specially crafted arguments that result in memory corruption. The exploitation of this vulnerability could potentially allow an attacker to compromise the security and integrity of the affected systems, enabling unauthorized access and control.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.