QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2011-1280

Back to search

CVE-2011-1280

Published: Jun 16, 2011

Modified: Aug 6, 2024

PUBLISHED

Description

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

48196
vdb-entry
x_refsource_BID
1025647
vdb-entry
x_refsource_SECTRACK
1025648
vdb-entry
x_refsource_SECTRACK
MS11-049
vendor-advisory
x_refsource_MS
1025646
vdb-entry
x_refsource_SECTRACK
oval:org.mitre.oval:def:12664
vdb-entry
signature
x_refsource_OVAL
44912
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now