CVE-2013-5999
NONE EPSS 43.6%
Published Nov 22, 201312y ago · Modified Jun 16, 20262w ago
Published Nov 22, 2013 12y ago
Last Modified Jun 16, 2026 2w ago
Description
Kingsoft KDrive Personal before 1.21.0.1880 on Windows does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Threat Intelligence
EPSS Exploit Probability
43.6% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
Weaknesses 1
CWE-310
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| kingsoft | kdrive | * | ≤1.21.0.1878 |
References 3
- faq.kdrive.jp http://faq.kdrive.jp/2013/11/19/pcappupdate.html
- jvn.jp http://jvn.jp/en/jp/JVN97810280/index.html
- jvndb.jvn.jp http://jvndb.jvn.jp/jvndb/JVNDB-2013-000108
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.