CVE-2006-4686 - Extinctive Overloads

Description

Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.

Reference

http://www.kb.cert.org/vuls/id/562788 http://www.securityfocus.com/bid/20338 http://securitytracker.com/id?1017033 http://secunia.com/advisories/22333 http://www.osvdb.org/29426 http://www.vupen.com/english/advisories/2006/3980 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A285 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-061 http://www.securityfocus.com/archive/1/449179/100/0/threaded