High severity8.8NVD Advisory· Published Jan 9, 2013· Updated Apr 29, 2026
CVE-2013-0006
CVE-2013-0006
Description
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."
Affected products
29cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:expression_web:*:sp1:*:*:*:*:*:*
cpe:2.3:a:microsoft:groove_server:2007:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:groove_server:2007:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:groove_server:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*+ 3 more
- cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*+ 1 more
- cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.