Exploitation Summary
CVE-2006-5745 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 5 public exploits from researchers including Metasploit, M03, ~Fyodor, including a Metasploit module exploits/windows/browser/ms06_071_xml_core.
AI-analyzed exploit summary This is a Metasploit module exploiting CVE-2006-5745, a code execution vulnerability in Microsoft XML Core Services via the XMLHTTP ActiveX control. It uses a heap spray technique to achieve remote code execution on vulnerable systems.
Description
Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.
Exploits (5)
This is a Metasploit module exploiting CVE-2006-5745, a code execution vulnerability in Microsoft XML Core Services via the XMLHTTP ActiveX control. It uses a heap spray technique to achieve remote code execution on vulnerable systems.
This exploit targets a vulnerability in Microsoft Internet Explorer 6/7 (XML Core Services) to achieve remote code execution. It generates an HTML file with malicious JavaScript that triggers a heap spray and shellcode execution when loaded in a vulnerable browser.
This exploit leverages a heap spray technique to trigger a vulnerability in Microsoft XML Core Services (MSXML) via a malformed `setRequestHeader` call, leading to arbitrary code execution. The payload is a classic heap spray with NOP sleds and shellcode.
This exploit targets a vulnerability in Microsoft XML Core Services (MSXML) in Internet Explorer 6/7. It uses a heap spray technique to achieve remote code execution by triggering a memory corruption via malformed arguments to the `open` and `setRequestHeader` methods of the `XMLHTTP` object.
This Metasploit module exploits a code execution vulnerability in Microsoft XML Core Services via the XMLHTTP ActiveX control. It uses a heap spray technique to achieve remote code execution on vulnerable systems.