Логотип exploitDog
bind:CVE-2014-1816
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2014-1816

Количество 3

Количество 3

nvd логотип

CVE-2014-1816

больше 11 лет назад

Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka "MSXML Entity URI Vulnerability."

CVSS2: 4.3
EPSS: Средний
github логотип

GHSA-fw9f-x7gq-r4jp

больше 3 лет назад

Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka "MSXML Entity URI Vulnerability."

EPSS: Средний
fstec логотип

BDU:2015-00635

больше 11 лет назад

Уязвимость программного обеспечения Microsoft XML Core Services, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

CVSS2: 4.3
EPSS: Средний

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2014-1816

Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka "MSXML Entity URI Vulnerability."

CVSS2: 4.3
11%
Средний
больше 11 лет назад
github логотип
GHSA-fw9f-x7gq-r4jp

Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka "MSXML Entity URI Vulnerability."

11%
Средний
больше 3 лет назад
fstec логотип
BDU:2015-00635

Уязвимость программного обеспечения Microsoft XML Core Services, позволяющая удаленному злоумышленнику нарушить конфиденциальность защищаемой информации

CVSS2: 4.3
11%
Средний
больше 11 лет назад

Уязвимостей на страницу