NVD

Id
8243  
Name
CVE-2011-1280  
Description
The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka "XML External Entities Resolution Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-06-16  
Modified Date
2012-04-04  
Seq
2011-1280  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47348 8243 CVE-2011-1280 oval:org.mitre.oval:def:12664  View
47349 8243 CVE-2011-1280 MS11-049  View
47350 8243 CVE-2011-1280 48196  View
47351 8243 CVE-2011-1280 1025646  View
47352 8243 CVE-2011-1280 1025647  View
47353 8243 CVE-2011-1280 1025648  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31520 JVNDB-2011-001760 複数の Microsoft 製品における任意のファイルを読まれる脆弱性 複数の Microsoft 製品は、外部エンティティを適切に処理しないため、任意のファイルを読まれる脆弱性が存在します。 CVE-2011-1280 49187 CVE-2011-1280 8243 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001760.html 2011-06-14 2011-06-27 View