CVE-2013-0096

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."

Score

CVSS 2.0 6.8 Medium

Status

Modified - secure@microsoft.com

Published

2013-05-15

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Windows Essentials (Microsoft)

References

• http://www.us-cert.gov/ncas/alerts/TA13-134A
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204