Lucene search
K

8 matches found

securityvulns
securityvulns
added 2013/05/27 12:0 a.m.32 views

Microsoft Windows Essentials information leakage

Microsoft Writer invalid URL handling...

6.8CVSS1.7AI score0.41251EPSS
Exploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2013/05/15 3:36 a.m.2 views

CVE-2013-0096

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."...

6.8CVSS5.8AI score0.41251EPSS
Exploits0References4
Prion
Prion
added 2013/05/15 3:36 a.m.15 views

Spoofing

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."...

6.8CVSS7.2AI score0.41251EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2013/05/15 1:0 a.m.148 views

CVE-2013-0096

CVE-2013-0096 relates to Microsoft Windows Essentials Writer: an information-disclosure vulnerability in Windows Essentials 2011/2012 where specially crafted URLs could cause a user’s proxy settings to be bypassed and files overwritten. Exploitation relies on handling of URIs by Windows Writer, e...

6.8CVSS6.7AI score0.41251EPSS
Exploits0References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2013/05/15 12:0 a.m.39 views

MS13-045: Vulnerability in Windows Essentials Could Allow Information Disclosure (2813707)

The version of Windows Essentials 2011 or 2012 installed on the remote host has an information disclosure vulnerability. Windows Writer, part of Windows Essentials, fails to properly handle specially crafted URLs. A remote attacker could exploit this by tricking a user into opening a maliciously...

6.8CVSS5.5AI score0.41251EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/05/15 12:0 a.m.24 views

Windows Essentials Information Disclosure Vulnerability (2813707)

This host is missing an important security update according to Microsoft Bulletin MS13-045. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

6.8CVSS5AI score0.41251EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2013/05/15 12:0 a.m.59 views

Windows Essentials Information Disclosure Vulnerability (2813707)

This host is missing an important security update according to Microsoft Bulletin MS13-045. OpenVAS Vulnerability Test $Id: secpodms13-045.nasl 8160 2017-12-18 15:33:57Z cfischer $ Windows Essentials Information Disclosure Vulnerability 2813707 Authors: Arun Kallavi Copyright: Copyright c 2013...

6.8CVSS6.5AI score0.41251EPSS
Exploits0References2
Symantec
Symantec
added 2013/05/14 12:0 a.m.32 views

Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability

Description Microsoft Windows Essentials is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Windows Essentials 2011 Microsoft Windows Essentials 2012 Recommendations...

6.8CVSS0.2AI score0.41251EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder