CVE-2015-1646 – Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to by

Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka “MSXML3 Same Origin Policy SFB Vulnerability.”

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1646

Reference (s):

• MS:MS15-039
• URL: https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-039
• SECTRACK:1032114
• URL: http://www.securitytracker.com/id/1032114