CVE-2006-4685

None

CVSS

—

EPSS

20.7%

Published

Oct 10, 2006

CISA due date

—

The record

The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.

Affected packages

Ecosystem	Package	Introduced	Fixed