MS15-084 - Important: Vulnerabilities in XML Core Services Could Allow Information...

[Guest Microsoft Security]

Severity Rating: Important

Revision Note: V1.0 (August 11, 2015): Bulletin published.

Summary: This security update resolves vulnerabilities in Microsoft Windows. The vulnerabilities could allow information disclosure by either exposing memory addresses if a user clicks a specially crafted link or by explicitly allowing the use of Secure Sockets Layer (SSL) 2.0. However, in all cases an attacker would have no way to force users to click a specially crafted link; an attacker would have to convince users to click the link, typically by way of an enticement in an email or Instant Messenger message.

 

Continue reading...