HTTP: Microsoft Windows Live Writer Information Disclosure
This signature detects attempts to exploit a known vulnerability against Microsoft Windows Live Writer. A successful attack can lead to unauthorized information disclosure.
Extended Description
Writer in Microsoft Windows Essentials 2011 and 2012 allows remote attackers to bypass proxy settings and overwrite arbitrary files via crafted URL parameters, aka "Windows Essentials Improper URI Handling Vulnerability."
Affected Products
Microsoft windows_essentials
References
CVE: CVE-2013-0096
Short Name
HTTP:STC:WLW-INFO-DISC
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2013-0096 Disclosure Information Live Microsoft Windows Writer
Release Date
05/10/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Microsoft
CVSS Score
6.8