CVE-2010-2561

published 2010-08-11

CVE-2010-2561: Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial…

critical 9.3 CVSS 3.1

AV N AC M Au N C C I C A C

EXPLOIT

Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka "Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability."

Affected

1 ranges

Vendor	Product	Version range	Fixed in
microsoft	xml_core_services	—	—

CWE-94