Microsoft Office 2013 Token Hijacking Information Disclosure (MS13-104; CVE-2013-5054)

An information disclosure vulnerability has been reported in Microsoft Office. The vulnerability is due to an error in the way Microsoft Office handles specially crafted responses. A remote attacker can exploit this issue by enticing a victim to open an Office file hosted on a malicious website...

CVE-2013-5054

CVE-2013-5054 affects Microsoft Office 2013 and 2013 RT. The vulnerability is an information disclosure where remote attackers can gain authentication tokens by exploiting a flaw in how Office handles specially crafted responses to file-open requests on a malicious website. The issue is described...

Microsoft Office Information Disclosure Vulnerability (2909976)

This host is missing an important security update according to Microsoft Bulletin MS13-104. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...