CVE-2013-7331

🗓️ 26 Feb 2014 14:55:08Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 13 Views

Microsoft.XMLDOM ActiveX control security vulnerability in Windows 8.1 and earlier

Reporter	Title	Published	Views	Family All 15
ATTACKERKB	CVE-2013-7331	26 Feb 201400:00	–	attackerkb
Circl	CVE-2013-7331	10 Oct 201409:13	–	circl
CISA KEV Catalog	Microsoft Internet Explorer Information Disclosure Vulnerability	25 May 202200:00	–	cisa_kev
Check Point Advisories	Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)	30 Oct 201400:00	–	checkpoint_advisories
CVE	CVE-2013-7331	26 Feb 201411:00	–	cve
Cvelist	CVE-2013-7331	26 Feb 201411:00	–	cvelist
Metasploit	MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure	30 Mar 201515:39	–	metasploit
OpenVAS	Microsoft Internet Explorer Multiple Vulnerabilities (2977629)	10 Sep 201400:00	–	openvas
Packet Storm	MS14-052 Microsoft Internet Explorer XMLDOM Filename Disclosure	31 Aug 202400:00	–	packetstorm
Prion	Design/Logic Flaw	26 Feb 201414:55	–	prion

NVD

Node

microsoft internet_explorerMatch6

AND

microsoft windows_server_2003Match-sp2

Node

microsoft internet_explorerMatch7

AND

microsoft windows_server_2003Match-sp2

OR

microsoft windows_server_2008Match-sp2

OR

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch8

AND

microsoft windows_7Match-sp1

OR

microsoft windows_server_2003Match-sp2

OR

microsoft windows_server_2008Match-sp2

OR

microsoft windows_server_2008Matchr2sp1itanium

OR

microsoft windows_server_2008Matchr2sp1x64

OR

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch9

AND

microsoft windows_7Match-sp1

OR

microsoft windows_server_2008Match-sp2

OR

microsoft windows_server_2008Matchr2sp1x64

OR

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch10

AND

microsoft windows_7Match-sp1

OR

microsoft windows_8Match-

OR

microsoft windows_rtMatch-

OR

microsoft windows_server_2008Matchr2sp1x64

OR

microsoft windows_server_2012Match-

OR

microsoft windows_vistaMatch-sp2

Node

microsoft internet_explorerMatch11

AND

microsoft windows_7Match-sp1

OR

microsoft windows_8.1Match-

OR

microsoft windows_rt_8.1Match-

OR

microsoft windows_server_2008Matchr2sp1x64

OR

microsoft windows_server_2012Matchr2

Source	Link
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
securitytracker	www.securitytracker.com/id/1030818
kb	www.kb.cert.org/vuls/id/539289
fireeye	www.fireeye.com/blog/uncategorized/2014/02/operation-snowman-deputydog-actor-compromises-us-veterans-of-foreign-wars-website.html
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-052
soroush	www.soroush.secproject.com/blog/2013/04/microsoft-xmldom-in-ie-can-divulge-information-of-local-drivenetwork-in-error-messages/

22 Apr 2026 13:56Current

6.3Medium risk

Vulners AI Score6.3

CVSS 24.3

CVSS 3.16.5

EPSS0.81812

microsoft xmldom activex control security vulnerability windows 8.1 remote attackers pathnames unc share intranet hostnames intranet ip addresses error codes res:// url exploited