ID CVE-2013-1299
Summary Microsoft Windows Modern Mail allows remote attackers to spoof link targets via a crafted HTML e-mail message.
References
Vulnerable Configurations
  • cpe:2.3:a:microsoft:modern_mail:-:*:*:*:*:*:*:*
    cpe:2.3:a:microsoft:modern_mail:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_8:-:-:enterprise:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_8:-:-:enterprise:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_8:-:-:pro:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_8:-:-:pro:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_rt:-:*:*:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:-:datacenter:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2012:-:-:datacenter:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:-:essentials:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2012:-:-:essentials:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:-:foundation:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2012:-:-:foundation:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_server_2012:-:-:standard:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_server_2012:-:-:standard:*:*:*:*:*
CVSS
Base: 5.8 (as of 02-04-2013 - 04:00)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:M/Au:N/C:P/I:P/A:N
refmap via4
confirm http://technet.microsoft.com/security/advisory/2819682
mskb 2832006
Last major update 02-04-2013 - 04:00
Published 29-03-2013 - 16:09
Last modified 02-04-2013 - 04:00
Back to Top