Microsoft XML Parser (MSXML) and XML Core Services Unsupported

This script is Copyright (C) 2012-2017 Tenable Network Security, Inc.


Synopsis :

The remote Windows host contains unsupported XML parsers.

Description :

The remote host contains one or more unsupported versions of the
Microsoft XML Parser (MSXML) or XML Core Services.

Lack of support implies that no new security patches for the product
will be released by the vendor. As a result, it is likely to contain
security vulnerabilities.

Note that support for MSXML 3.0 and 6.0 is based on the support policy
of the operating system on which it is installed. Support for MSXML
5.0 is based on the Microsoft Office lifecycle policy.

See also :

https://support.microsoft.com/en-us/kb/269238
https://msdn.microsoft.com/en-us/library/jj152146(v=vs.85).aspx

Solution :

Upgrade the software packages responsible for the unsupported DLL
versions or upgrade to a supported version of Windows (Vista / 2008 or
later). Alternatively, uninstall the outdated MSXML or XML Core
Services.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Family: Windows

Nessus Plugin ID: 62758 ()

Bugtraq ID:

CVE ID:

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now