Windows System Information Console Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists in the Microsoft Common Console Document (.msc) when it improperly parses XML input containing a reference to an external entity. An attacker who successfully exploited this vulnerability could read arbitrary files via an XML external entity (XXE) declaration.</p> <p>To exploit the vulnerability, an attacker could create a file containing specially crafted XML content and convince an authenticated user to open the file.</p> <p>The update addresses the vulnerability by modifying the way that the Microsoft Common Console Document (.msc) parses XML input.</p>

Where it's fixed