Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2013-1301

Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka "XML External Entities Resolution Vulnerability."

  • Published: May 15, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-1301
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:P/I:N/A:N

CWEs:

Software From Fixed in
microsoft / visio 2007-sp3 2007-sp3.x
microsoft / visio 2003-sp3 2003-sp3.x
microsoft / visio 2010-sp1 2010-sp1.x