Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document, aka "XML Disclosure Vulnerability."
References
| Link | Resource |
|---|---|
| http://www.us-cert.gov/ncas/alerts/TA13-253A | Third Party Advisory US Government Resource |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-078 | |
| http://www.us-cert.gov/ncas/alerts/TA13-253A | Third Party Advisory US Government Resource |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-078 |
Configurations
History
21 Nov 2024, 01:53
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.us-cert.gov/ncas/alerts/TA13-253A - Third Party Advisory, US Government Resource | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-078 - |
Information
Published : 2013-09-11 14:03
Updated : 2024-11-21 01:53
NVD link : CVE-2013-3137
Mitre link : CVE-2013-3137
CVE.ORG link : CVE-2013-3137
JSON object : View
Products Affected
microsoft
- frontpage
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor