Описание
Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:microsoft:windows_essentials:2011:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:windows_essentials:2012:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.41251
Средний
6.8 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
почти 4 года назад
Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
EPSS
Процентиль: 97%
0.41251
Средний
6.8 Medium
CVSS2
Дефекты
CWE-264