PT-2019-1842

CVE-2019-0795

·

Published

2019-04-04

·

Updated

2019-04-11

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services (affected versions not specified)
Description The issue is related to errors in limiting XML links to external objects in the Microsoft XML Core Services syntax parser in Windows operating systems. This can allow a remote attacker to execute arbitrary code.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Vendors
Affected products
Weakness enumeration
CWE-611: Improper Restriction of XML External Entity Reference
Related identifiers
CVE-2019-0795
BDU:2019-01494
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com