Lucene search

CVE-2013-7331

🗓️ 26 Feb 2014 14:08:55Reported by [email protected]Type

Microsoft.XMLDOM ActiveX control security vulnerability in Windows 8.1 and earlier

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 13
CVE	CVE-2013-7331	26 Feb 201414:55	–	cve
Metasploit	MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure	30 Mar 201515:39	–	metasploit
Vulnrichment	CVE-2013-7331	26 Feb 201411:00	–	vulnrichment
Check Point Advisories	Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)	30 Oct 201400:00	–	checkpoint_advisories
AttackerKB	CVE-2013-7331	26 Feb 201400:00	–	attackerkb
Cvelist	CVE-2013-7331	26 Feb 201411:00	–	cvelist
ThreatPost	Popular Science Website Infected, Serving Malware	30 Oct 201407:00	–	threatpost
Prion	Design/Logic Flaw	26 Feb 201414:55	–	prion
Packet Storm	MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure	31 Aug 202400:00	–	packetstorm
CISA KEV Catalog	Microsoft Internet Explorer Information Disclosure Vulnerability	25 May 202200:00	–	cisa_kev

Nvd

Node

microsoft internet_explorerMatch6

AND

microsoft windows_server_2003Match-sp2

Node

microsoft internet_explorerMatch7

AND

microsoft windows_server_2003Match-sp2

microsoft windows_server_2008Match-sp2

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch8

AND

microsoft windows_7Match-sp1

microsoft windows_server_2003Match-sp2

microsoft windows_server_2008Match-sp2

microsoft windows_server_2008Matchr2sp1itanium

microsoft windows_server_2008Matchr2sp1x64

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch9

AND

microsoft windows_7Match-sp1

microsoft windows_server_2008Match-sp2

microsoft windows_server_2008Matchr2sp1x64

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch10

AND

microsoft windows_7Match-sp1

microsoft windows_8Match-

microsoft windows_rtMatch-

microsoft windows_server_2008Matchr2sp1x64

microsoft windows_server_2012Match-

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch11

AND

microsoft windows_7Match-sp1

microsoft windows_8.1Match-

microsoft windows_rt_8.1Match-

microsoft windows_server_2008Matchr2sp1x64

microsoft windows_server_2012Matchr2

Source	Link
fireeye	www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-052
soroush	www.soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/
securitytracker	www.securitytracker.com/id/1030818
kb	www.kb.cert.org/vuls/id/539289

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Feb 2014 14:55Current

6.3Medium risk

Vulners AI Score6.3

CVSS24.3

CVSS36.5

EPSS0.85217