Lucene search

K
cve[email protected]CVE-2013-0096
HistoryMay 15, 2013 - 3:36 a.m.

CVE-2013-0096

2013-05-1503:36:33
CWE-264
web.nvd.nist.gov
117
windows essentials
2011
2012
remote code execution
cve-2013-0096
vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.331 Low

EPSS

Percentile

97.1%

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka “Windows Essentials Improper URI Handling Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_essentialsMatch2011
OR
microsoftwindows_essentialsMatch2012

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

6.7 Medium

AI Score

Confidence

Low

0.331 Low

EPSS

Percentile

97.1%