Lucene search

K
cve[email protected]CVE-2013-0007
HistoryJan 09, 2013 - 6:09 p.m.

CVE-2013-0007

2013-01-0918:09:00
CWE-94
web.nvd.nist.gov
126
microsoft
xml
msxml
vulnerability
code execution
cve-2013-0007
nvd

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.935 High

EPSS

Percentile

99.1%

Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka “MSXML XSLT Vulnerability.”

7.4 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.935 High

EPSS

Percentile

99.1%