MS11-049: Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893) (uncredentialed check)

An application on the remote host has an information disclosure vulnerability. When parsing a specially crafted Web Service Discovery .disco file, external XML entities are allowed for untrusted user input. A remote attacker could exploit this by tricking a user into opening a specially crafted...

MS11-049: Vulnerability in the Microsoft XML Editor Could Allow Information Disclosure (2543893)

An application on the remote host has an XML external entity vulnerability. When parsing a specially crafted Web Service Discovery .disco file, external XML entities are allowed for untrusted user input. This could result in information disclosure. A remote attacker could exploit this by tricking...

KB2543893 - MS11-049: Vulnerability in the Microsoft XML Editor could allow information disclosure: June 14, 2011

Resolves a vulnerability in Microsoft XML Editor that could allow information disclosure if a user opened a specially crafted Web Service Discovery .disco file within one of the applications listed in the "Applies to" section.IntroductionMicrosoft has released security bulletin MS11-049. To view...