Microsoft Windows Essentials Improper URI Handling Vulnerability
Last Update Date:
15 May 2013 14:27
Release Date:
15 May 2013
3379
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
An information disclosure vulnerability exists when Windows Writer fails to properly handle a specially crafted URL. An attacker who successfully exploited the vulnerability could override Windows Writer proxy settings and overwrite files accessible to the user on the target system.
Impact
- Information Disclosure
System / Technologies affected
- Windows Essentials 2011
- Windows Essentials 2012
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/security/bulletin/ms13-045
Vulnerability Identifier
Source
Related Link
Share with