Microsoft XML Core Services Information Disclosure

This strike exploits a vulnerability that exists in Microsoft XML Core Services. Specifically, if the loadXML function is used to reference a portable executable with the res protocol in its URI, the parseError method can return a message up the stack that can be used to identify whether or not the file exists. An attacker can use this method to disclose which portable executables exist on the target's system.