CVE-2013-3137

Currently unrated

Key Information:

Vendor: Microsoft
Status: Frontpage
Vendor: CVE Published:; 11 September 2013

Summary

Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document, aka "XML Disclosure Vulnerability."

References

https://docs.microsoft.com/en-us/security-updates/securit...

vendor-advisoryx_refsource_MS

http://www.us-cert.gov/ncas/alerts/TA13-253A

third-party-advisoryx_refsource_CERT

EPSS Score

1% chance of being exploited in the next 30 days.

Timeline

Vulnerability published
Sep 11, 2013
Vulnerability Reserved
Apr 17, 2013

Collectors

NVD DatabaseMitre Database