CVE

Id
23574  
CVE No.
CVE-2007-0217  
Status
Candidate  
Description
The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption.  
Phase
Assigned (20070112)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
228365 23574 CVE-2007-0217 IDEFENSE:20070213 Microsoft "wininet.dll" FTP Reply Null Termination Heap Corruption Vulnerability  View
228366 23574 CVE-2007-0217 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473  View
228367 23574 CVE-2007-0217 BUGTRAQ:20070309 MS07-016 FTP Response DOS PoC  View
228368 23574 CVE-2007-0217 URL:http://www.securityfocus.com/archive/1/archive/1/462303/100/0/threaded  View
228369 23574 CVE-2007-0217 MS:MS07-016  View
228370 23574 CVE-2007-0217 URL:http://www.microsoft.com/technet/security/Bulletin/MS07-016.mspx  View
228371 23574 CVE-2007-0217 CERT:TA07-044A  View
228372 23574 CVE-2007-0217 URL:http://www.us-cert.gov/cas/techalerts/TA07-044A.html  View
228373 23574 CVE-2007-0217 CERT-VN:VU#613564  View
228374 23574 CVE-2007-0217 URL:http://www.kb.cert.org/vuls/id/613564  View
228375 23574 CVE-2007-0217 BID:22489  View
228376 23574 CVE-2007-0217 URL:http://www.securityfocus.com/bid/22489  View
228377 23574 CVE-2007-0217 VUPEN:ADV-2007-0584  View
228378 23574 CVE-2007-0217 URL:http://www.vupen.com/english/advisories/2007/0584  View
228379 23574 CVE-2007-0217 OSVDB:31892  View
228380 23574 CVE-2007-0217 URL:http://www.osvdb.org/31892  View
228381 23574 CVE-2007-0217 OVAL:oval:org.mitre.oval:def:1141  View
228382 23574 CVE-2007-0217 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1141  View
228383 23574 CVE-2007-0217 SECTRACK:1017642  View
228384 23574 CVE-2007-0217 URL:http://www.securitytracker.com/id?1017642  View
228385 23574 CVE-2007-0217 SECUNIA:24156  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51486 JVNDB-2007-000148 Microsoft Internet Explorer の特定の COM オブジェクトによる任意のコードが実行される脆弱性 Microsoft Internet Explorer には Msb1fren.dll および Htmlmm.ocx、Blnmgrps.dll に含まれる COM オブジェクトを ActiveX コントロールとして使用している際に、任意のコードが実行される脆弱性が存在します。本脆弱性は CVE-2006-4697 とは異なる問題です。 CVE-2007-0219 23574 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000148.html  View