Microsoft Windows Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when the Windows its:// protocol handler unnecessarily sends traffic to a remote site in order to determine the zone of a provided URL. This could potentially result in the disclosure of sensitive information to a malicious site.</p> <p>To exploit the vulnerability an attacker would have to trick a user into browsing to a malicious website or to an SMB or UNC path destination. An attacker who successfully tricked a user into disclosing the user's NTLM hash could attempt a brute-force attack to disclose the corresponding hash password.</p> <p>The security update addresses the vulnerability by correcting how the Windows its:// protocol handler determines the zone of a request.</p>

Where it's fixed