CVE Database
/

CVE-2013-1301

Back to search

CVE-2013-1301

Published: May 15, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

TA13-134A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:16750
vdb-entry
signature
x_refsource_OVAL
MS13-044
vendor-advisory
x_refsource_MS

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now