PT-2013-2100 · Microsoft · Windows Essentials

Andrea Micalizzi · Published 2013-05-15 · Updated 2018-10-12 · CVE-2013-0096

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Windows Essentials versions 2011 through 2012

Description The issue allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters.

Recommendations For Microsoft Windows Essentials versions 2011 through 2012, update to a version that includes the fix for the improper URI handling issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2013-0096

Affected Products

Windows Essentials

References · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-045 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-0096 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16204 · Note
• http://us-cert.gov/ncas/alerts/TA13-134A · Note