Home / bulletins MS13-104 - Important : Vulnerability in Microsoft Office Could Allow Information Disclosure (2909976) - Version: 1.0
Posted on 10 December 2013
ImportantSeverity Rating: Important
Revision Note: V1.0 (December 10, 2013): Bulletin published.
Summary: This security update resolves one privately reported vulnerability in Microsoft Office that could allow information disclosure if a user attempts to open an Office file hosted on a malicious website. An attacker who successfully exploited this vulnerability could ascertain access tokens used to authenticate the current user on a targeted SharePoint or other Microsoft Office server site.
