CVE-2006-4686: Buffer Overflow
Buffer overflow in the Extensible Stylesheet Language Transformations (XSLT) processing in Microsoft XML Parser 2.6 and XML Core Services 3.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted Web page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-4686?
CVE-2006-4686 has a critical severity rating due to the potential for remote code execution.
How do I fix CVE-2006-4686?
To fix CVE-2006-4686, ensure that you update Microsoft XML Parser and XML Core Services to the latest versions.
Which software versions are affected by CVE-2006-4686?
CVE-2006-4686 affects Microsoft XML Parser 2.6 and Microsoft XML Core Services 3.0, 4.0, and 6.0.
What are the consequences of CVE-2006-4686 exploitation?
Exploitation of CVE-2006-4686 can allow an attacker to execute arbitrary code on a vulnerable system.
Is there a workaround for CVE-2006-4686?
A temporary workaround for CVE-2006-4686 includes disabling the use of XML parsing features in applications until a fix is applied.