Microsoft MSXML Information Disclosure Vulnerability
Last Update Date:
12 Feb 2014 12:17
Release Date:
12 Feb 2014
3354
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
An information disclosure vulnerability exists that could allow an attacker to read files on the local file system of a user, or read content of web domains where a user is currently authenticated. An attacker could exploit this vulnerability when a user views specially crafted web content that is designed to invoke MSXML through Internet Explorer.
Impact
- Information Disclosure
System / Technologies affected
- Windows XP
- Windows Server 2003
- Windows Vista
- Windows Server 2008
- Windows 7
- Windows Server 2008 R2
- Windows 8 and Windows 8.1
- Windows Server 2012 and Windows Server 2012 R2
- Windows RT and Windows RT 8.1
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/MS14-005
Vulnerability Identifier
Source
Related Link
Share with