SecuritySpace - CVE-2015-2556

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-2556

Description: The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-2556
Microsoft Security Bulletin: MS15-110
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110
http://www.securitytracker.com/id/1033804

CVE ID:	CVE-2015-2556
Description:	The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses DTDs, which allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "Microsoft SharePoint Information Disclosure Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-2556 Microsoft Security Bulletin: MS15-110 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-110 http://www.securitytracker.com/id/1033804