HTTP: Microsoft MSXML3 CVE-2015-1646 Security Bypass
This signature detects attempts to exploit a known vulnerability in the Microsoft Office. A successful attack can lead to allow security feature bypass.
Extended Description
Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."
Affected Products
Microsoft xml_core_services
References
CVE: CVE-2015-1646
Short Name
HTTP:STC:MSXML-CVE-2015-1646-SB
Severity
Major
Recommended
True
Recommended Action
Drop
Category
HTTP
Keywords
Bypass CVE-2015-1646 MSXML3 Microsoft Security
Release Date
04/14/2015
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Microsoft
CVSS Score
4.3