Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
BID:59783
Info
Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
| Bugtraq ID: | 59783 |
| Class: | Design Error |
| CVE: |
CVE-2013-0096 |
| Remote: | Yes |
| Local: | No |
| Published: | May 14 2013 12:00AM |
| Updated: | May 14 2013 12:00AM |
| Credit: | Andrea Micalizzi, working with Beyond Security's SecuriTeam Secure Disclosure team |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
Microsoft Windows Essentials is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
Microsoft Windows Essentials is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
Exploit / POC
Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft Windows Essentials CVE-2013-0096 URI Handling Information Disclosure Vulnerability
References:
References:
- Windows Essentials Homepage (Microsoft)
- Microsoft Security Bulletin MS13-045 (Microsoft)