Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-8mc7-rqj3-66wm

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability."

Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability."

EPSS

Процентиль: 96%
0.28558
Средний

Дефекты

CWE-200

Связанные уязвимости

nvd
больше 12 лет назад

Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka "XML External Entities Resolution Vulnerability."

EPSS

Процентиль: 96%
0.28558
Средний

Дефекты

CWE-200