Microsoft XML Core Services Information Disclosure Vulnerability

<p>An information vulnerability exists when <a href="https://technet.microsoft.com/en-us/library/security/dn8">Microsoft XML Core Services (MSXML)</a> improperly handles objects in memory. Successful exploitation of the vulnerability could allow the attacker to test for the presence of files on disk.</p> <p>To exploit the vulnerability, an attacker could host a specially-crafted website that is designed to invoke MSXML through Internet Explorer. However, an attacker would have no way to force a user to visit such a website. Instead, an attacker would typically have to convince a user to either click a link in an email message or a link in an Instant Messenger request that would then take the user to the website.</p> <p>The update addresses the vulnerability by changing the way MSXML handles objects in memory.</p>

Where it's fixed