Total vulnerabilities in the database
The XMLHTTP ActiveX control in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 does not properly handle HTTP server-side redirects, which allows remote user-assisted attackers to access content from other domains.
| Software | From | Fixed in |
|---|---|---|
| microsoft / xml_core_services | 3.0 | 3.0.x |
| microsoft / xml_core_services | 4.0 | 4.0.x |
| microsoft / xml_core_services | 6.0 | 6.0.x |
| microsoft / xml_parser | 2.6 | 2.6.x |