4.3

CVE-2013-1301

EPSS 27.84%
Veröffentlicht 15.05.2013 03:36:33
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Visio Version2003 Updatesp3

Microsoft ≫ Visio Version2007 Updatesp3

Microsoft ≫ Visio Version2010 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	27.84%	0.962

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://www.us-cert.gov/ncas/alerts/TA13-134A

Third Party Advisory

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-044

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16750

https://nvd.nist.gov/vuln/detail/CVE-2013-1301

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2013-1301

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2013-1301

EUVD