Описание
Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:visio:2007:sp3:*:*:*:*:*:*
cpe:2.3:a:microsoft:visio:2010:sp1:*:*:*:*:*:*
EPSS
Процентиль: 96%
0.27835
Средний
4.3 Medium
CVSS2
Дефекты
CWE-200
Связанные уязвимости
github
больше 3 лет назад
Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."
EPSS
Процентиль: 96%
0.27835
Средний
4.3 Medium
CVSS2
Дефекты
CWE-200