Vulnerability in Microsoft Windows Essentials

CVE-2013-0096

Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."

EPSS: 0.161 (96.6th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_essentials — versions 2011, 2012
N/a — versions n/a

Weakness classification (CWE)

CWE-264

References

secure@microsoft.com (US Government Resource, Third Party Advisory, x_refsource_CERT, third-party-advisory)
secure@microsoft.com (x_refsource_MS, vendor-advisory)
secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)