Microsoft Word CVE-2013-3160 XML Files Handling Information Disclosure Vulnerability

Bugtraq ID:	62162
Class:	Unknown
CVE:	CVE-2013-3160
Remote:	Yes
Local:	No
Published:	Sep 10 2013 12:00AM
Updated:	Sep 10 2013 12:00AM
Credit:	Timur Yunusov, Alexey Osipov, and Ilya Karpov of Positive Technologies
Vulnerable:	Microsoft Word Viewer 0 Microsoft Word 2007 SP3 Microsoft Word 2007 SP2 Microsoft Word 2007 SP1 Microsoft Word 2003 SP3 Microsoft Word 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsoft Office 2003 0 Microsoft Word 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsoft Office 2003 0 Microsoft Office 2007 SP3 Microsoft Office 2007 SP2 Microsoft Office 2007 SP1 Microsoft Office 2003 SP3 Microsoft Office 2003 SP2 Microsoft Office 2003 SP1
Not Vulnerable:

Microsoft Word CVE-2013-3160 XML Files Handling Information Disclosure Vulnerability

Microsoft Word is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

Microsoft Word CVE-2013-3160 XML Files Handling Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Word CVE-2013-3160 XML Files Handling Information Disclosure Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Microsoft Word Homepage (Microsoft )