Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft XML Core Services安全漏洞
Vulnerability Description
Microsoft XML Core Services是美国微软（Microsoft）公司的加载 XHTML 文档的应用程序时，MSXML 将向万维网联盟 (W3C) 发送请求，以获取众所周知的文档类型定义 (DTD) 文件。 Microsoft Internet Explorer是和Windows系统捆绑的流行的Web浏览器。与IE 6.0一起发布的XMLHTTP ActiveX控件存在漏洞，使攻击者可以获取浏览者本地主机上的文件。当IE的XMLHTTP控件响应一个文件重定向请求时，它会去处理请求所指向
CVSS Information
N/A
Vulnerability Type
N/A