Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by sniffing the network and conducting a decryption attack, aka MSXML Information Disclosure Vulnerability, a different vulnerability than CVE-2015-2434.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Xml_core_services | Microsoft | 3.0 (including) | 3.0 (including) |
| Xml_core_services | Microsoft | 5.0 (including) | 5.0 (including) |
| Xml_core_services | Microsoft | 6.0 (including) | 6.0 (including) |