CVE-2013-0006

Published: Jan 9, 2013Modified: Apr 29, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."

Affected (29)

Products: Microsoft: Xml Core Services, Windows 7, Windows 8, Windows Server 2008, Windows Server 2012, Windows Xp, Windows Rt, Windows Server 2003, Windows Vista, Expression Web, Groove Server, Office, Office Compatibility Pack, Sharepoint Server, Word Viewer

15 products

Office Compatibility Pack

Sharepoint Server

Word Viewer

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft Xml Core Services	Version 3.0
Microsoft Windows 7	All versions
Microsoft Windows 8	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Server 2008	Version r2
Microsoft Windows Server 2012	All versions
Microsoft Windows Xp	All versions

Configuration B

8 vulnerable

Vulnerable Software	Affected Versions
Microsoft Xml Core Services	Version 4.0
Microsoft Xml Core Services	Version 6.0
Microsoft Windows 7	All versions
Microsoft Windows Rt	All versions
Microsoft Windows Server 2003	All versions
Microsoft Windows Server 2008	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions

Configuration C

13 vulnerable

Vulnerable Software	Affected Versions
Microsoft Xml Core Services	Version 5.0
Microsoft Expression Web	All versions
Microsoft Expression Web	Version 2
Microsoft Groove Server	Version 2007 sp2
Microsoft Groove Server	Version 2007 sp3
Microsoft Office	Version 2003 sp3
Microsoft Office	Version 2007 sp2
Microsoft Office	Version 2007 sp3
Microsoft Office Compatibility Pack	All versions
Microsoft Office Compatibility Pack	All versions
Microsoft Sharepoint Server	Version 2007 sp2
Microsoft Sharepoint Server	Version 2007 sp3
Microsoft Word Viewer	All versions