CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-02-26
Microsoft Windows XMLDOM ActiveX Control Information Disclosure Vulnerability (CVE-2013-7331)
[Affected Scope] Microsoft.XMLDOM ActiveX control and Internet Explorer on Microsoft Windows 8.1 and earlier
[Impact] Remote attackers can determine the existence of local pathnames, UNC shares, intranet hostnames, and IP addresses via error code analysis
[Mitigation] Apply the MS14-052 cumulative security update or restrict ActiveX execution in Internet Explorer