Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka "MSXML Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2434.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 02:27
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.securitytracker.com/id/1033241 - | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-084 - |
Information
Published : 2015-08-15 00:59
Updated : 2024-11-21 02:27
NVD link : CVE-2015-2471
Mitre link : CVE-2015-2471
CVE.ORG link : CVE-2015-2471
JSON object : View
Products Affected
microsoft
- xml_core_services
CWE
CWE-310
Cryptographic Issues