PT-2013-2058 · Microsoft · Xml Core Services+2

CVE-2013-0007

·

Publicado

2013-01-09

·

Atualizado

2023-12-07

CVSS v2.0

9.3

Alta

VetorAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Microsoft XML Core Services versions 4.0 through 6.0
Description A remote code execution issue exists due to improper parsing of XML content, allowing attackers to execute arbitrary code via a crafted web page. This may corrupt memory, enabling an attacker to execute code in the context of the current user.
Recommendations For Microsoft XML Core Services versions 4.0 through 6.0, update to a version that properly parses XML content to prevent remote code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Code Injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

CVE-2013-0007

Produtos afetados

Xml Core Services
Office
Sharepoint Server