Title

Microsoft XML Core Services Remote Code Execution Vulnerability (MS16-040) (Cat II impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability affecting Microsoft XML Core Services. To exploit this vulnerability, an attacker would entice a user to open a malicious webpage via email sent. If successfully exploited, this vulnerability would allow an attacker to execute arbitrary code and take control of the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-68345

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.