This host is missing an important security update according to Microsoft Bulletin MS14-005.

Successful exploitation will allow remote attackers to read files on the local file system of the user or read content of web domains where the user is currently authenticated. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, https://technet.microsoft.com/en-us/security/bulletin/ms14-005

The flaw is due to an unspecified error which improperly enforce cross-domain policies.

Microsoft Windows 8 x32/x64 Microsoft Windows 8.1 x32/x64 Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows XP Service Pack 3 and prior Microsoft Windows 7 x32/x64 Service Pack 1 and prior Microsoft Windows 2003 x32/x64 Service Pack 2 and prior Microsoft Windows Vista x32/x64 Service Pack 2 and prior Microsoft Windows XP x64 Edition Service Pack 2 and prior Microsoft Windows Server 2008 x32/x64 Service Pack 2 and prior Microsoft Windows Server 2008 R2 x64 Service Pack 1 and prior

Get the vulnerable file version and check appropriate patch is applied or not.

• http://osvdb.org/103189
• http://secunia.com/advisories/56771
• https://support.microsoft.com/kb/2916036
• https://technet.microsoft.com/en-us/security/bulletin/ms14-005

---

Updated on 2015-03-25