CVEvulnerability
CVE-2013-0096
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-05-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
Affected configurations
• microsoft windows essentials 2011
• microsoft windows essentials 2012
Related
Weakness · not in database (1)
References
- http://www.us-cert.gov/ncas/alerts/TA13-134A Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204 oval.cisecurity.org
- http://www.us-cert.gov/ncas/alerts/TA13-134A Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204 oval.cisecurity.org