Microsoft Windows Essentials information leakage

Microsoft Writer invalid URL handling...

Spoofing

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."...

CVE-2013-0096: Undefined Security Weakness

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."...

PT-2013-2100

Name of the Vulnerable Software and Affected Versions Microsoft Windows Essentials versions 2011 through 2012 Description The issue allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters. Recommendations For Microsoft Windows Essentials versions...

Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability

Description Microsoft Windows Essentials is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows Essentials 2011 Microsoft Windows Essentials 2012 Recommendations...