Skip to main content

Microsoft Windows Essentials Improper URI Handling Vulnerability

Last Update Date: 15 May 2013 14:27 Release Date: 15 May 2013 3910 Views

RISK: Medium Risk

TYPE: Operating Systems - Windows OS

TYPE: Windows OS

An information disclosure vulnerability exists when Windows Writer fails to properly handle a specially crafted URL. An attacker who successfully exploited the vulnerability could override Windows Writer proxy settings and overwrite files accessible to the user on the target system.


Impact

  • Information Disclosure

System / Technologies affected

  • Windows Essentials 2011
  • Windows Essentials 2012

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link