Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability

Document Title: =============== Microsoft Windows - MSC XXE Data Exfiltrate Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2094 MSRC Acknowledgements: https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-8710 Public...

Microsoft Windows XXE Information Disclosure (CVE-2017-8710)

An XML external entity XXE injection vulnerability exists in the Console component of Microsoft Windows. The vulnerability is due to a failure to properly handle external entity references in XML files. A remote attacker could exploit this vulnerability by enticing a target user into opening a...

CVE-2017-8710

The CVE-2017-8710 entry concerns an XXE-based information disclosure in the Microsoft Common Console Document (.msc). Affected products include Windows 7 SP1, Windows Server 2008 SP2, and Windows Server 2008 R2 SP1, where the MSC parser improperly handles external entity references in XML input, ...

Microsoft Windows Information Disclosure Vulnerability (KB4039038)

This host is missing an important security update according to Microsoft KB4039038 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Security update for the information disclosure vulnerability in Windows Server 2008: September 12, 2017

Security update for the information disclosure vulnerability in Windows Server 2008: September 12, 2017 Summary An information disclosure vulnerability exists in the Microsoft Common Console Document .msc when it improperly parses XML input that contains a reference to an external entity. An...

Microsoft Windows CVE-2017-8710 Information Disclosure Vulnerability

Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1 Microsoft Windows 7 for x64-based Systems...