CVE-2006-5745

Unspecified vulnerability in the setRequestHeader method in the XMLHTTP (XML HTTP) ActiveX Control 4.0 in Microsoft XML Core Services 4.0 on Windows, when accessed by Internet Explorer, allows remote attackers to execute arbitrary code via crafted arguments that lead to memory corruption, a different vulnerability than CVE-2006-4685. NOTE: some of these details are obtained from third party information.

• http://blogs.securiteam.com/?p=717
• http://secunia.com/advisories/22687Vendor Advisory
• http://securitytracker.com/id?1017157
• http://www.iss.net/threats/239.html
• http://www.kb.cert.org/vuls/id/585137US Government Resource
• http://www.microsoft.com/technet/security/advisory/927892.mspx
• http://www.securityfocus.com/bid/20915Exploit
• http://www.us-cert.gov/cas/techalerts/TA06-318A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4334
• http://xforce.iss.net/xforce/alerts/id/239Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30004
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104
• https://www.exploit-db.com/exploits/2743
• http://blogs.securiteam.com/?p=717
• http://secunia.com/advisories/22687Vendor Advisory
• http://securitytracker.com/id?1017157
• http://www.iss.net/threats/239.html
• http://www.kb.cert.org/vuls/id/585137US Government Resource
• http://www.microsoft.com/technet/security/advisory/927892.mspx
• http://www.securityfocus.com/bid/20915Exploit
• http://www.us-cert.gov/cas/techalerts/TA06-318A.htmlUS Government Resource
• http://www.vupen.com/english/advisories/2006/4334
• http://xforce.iss.net/xforce/alerts/id/239Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-071
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30004
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A104
• https://www.exploit-db.com/exploits/2743

Published

Nov 6, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-5739PHP remote file inclusion vulnerability in cpadmin/cpa_index…
• CVE-2006-5740Unspecified vulnerability in the LDAP dissector in Wireshark…
• CVE-2006-5741Multiple cross-site scripting (XSS) vulnerabilities in AirMa…
• CVE-2006-5742The AirMagnet Enterprise console and Remote Sensor console (…
• CVE-2006-5743Multiple cross-site scripting (XSS) vulnerabilities in Highw…
• CVE-2006-5744Multiple SQL injection vulnerabilities in Highwall Enterpris…
• CVE-2006-5746The console in AirMagnet Enterprise before 7.5 build 6307 do…
• CVE-2006-5747Unspecified vulnerability in Mozilla Firefox before 1.5.0.8,…
• CVE-2006-5748Multiple unspecified vulnerabilities in the JavaScript engin…
• CVE-2006-5749The isdn_ppp_ccp_reset_alloc_state function in drivers/isdn/…
• CVE-2006-5750Directory traversal vulnerability in the DeploymentFileRepos…
• CVE-2006-5751Integer overflow in the get_fdb_entries function in net/brid…