CVE-2013-7331 The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet I...
MediumCVSS 4.3
EPSS 50.2%
CISA KEV
added 2022-05-25 · due 2022-06-15
Exploited in the wild
Framework module
- Published
- Updated
- Exploit status
- Exploited in the wild (confirmed)
Description
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.
CISA Known Exploited Vulnerability
- Date added
- 2022-05-25
- Due date (FCEB)
- 2022-06-15
- Ransomware use
- Unknown
Required action
Apply updates per vendor instructions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
| Microsoft internet explorer | = 8 | No fix listed |
| Microsoft internet explorer | = 9 | No fix listed |
| Microsoft internet explorer | = 10 | No fix listed |
| Microsoft internet explorer | = 11 | No fix listed |
References
- www.fireeye.com third-party-advisory
- VU#539289 third-party-advisory us-government-resource
- 1030818 third-party-advisory vdb-entry
- MS14-052 patch vendor-advisory
- soroush.secproject.com exploit
- www.cisa.gov government-resource us-government-resource