VYPR
High severity8.8NVD Advisory· Published Jan 9, 2013· Updated Apr 29, 2026

CVE-2013-0006

CVE-2013-0006

Description

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."

Affected products

29
  • cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:expression_web:2:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:expression_web:*:sp1:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:groove_server:2007:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:groove_server:2007:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:groove_server:2007:sp3:*:*:*:*:*:*
  • Microsoft/Office3 versions
    cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office:2007:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:office_compatibility_pack:*:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp3:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:word_viewer:*:*:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:xml_core_services:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:xml_core_services:4.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:xml_core_services:5.0:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:xml_core_services:6.0:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_7:-:sp1:x64:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_8:-:-:x64:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*+ 3 more
    • cpe:2.3:o:microsoft:windows_server_2008:r2:-:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x86:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*+ 1 more
    • cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

News mentions

0

No linked articles in our index yet.