CVE

Id
25015  
CVE No.
CVE-2007-1658  
Status
Candidate  
Description
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).  
Phase
Assigned (20070324)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
248290 25015 CVE-2007-1658 FULLDISC:20070323 Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability  View
248291 25015 CVE-2007-1658 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0344.html  View
248292 25015 CVE-2007-1658 FULLDISC:20070323 Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability  View
248293 25015 CVE-2007-1658 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0345.html  View
248294 25015 CVE-2007-1658 FULLDISC:20070323 Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability  View
248295 25015 CVE-2007-1658 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-03/0346.html  View
248296 25015 CVE-2007-1658 MISC:http://isc.sans.org/diary.html?storyid=2507  View
248297 25015 CVE-2007-1658 MISC:http://news.com.com/2100-1002_3-6170133.html  View
248298 25015 CVE-2007-1658 MISC:http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9014194  View
248299 25015 CVE-2007-1658 HP:HPSBST02231  View
248300 25015 CVE-2007-1658 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
248301 25015 CVE-2007-1658 HP:SSRT071438  View
248302 25015 CVE-2007-1658 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
248303 25015 CVE-2007-1658 MS:MS07-034  View
248304 25015 CVE-2007-1658 URL:http://www.microsoft.com/technet/security/bulletin/ms07-034.mspx  View
248305 25015 CVE-2007-1658 CERT:TA07-163A  View
248306 25015 CVE-2007-1658 URL:http://www.us-cert.gov/cas/techalerts/TA07-163A.html  View
248307 25015 CVE-2007-1658 BID:23103  View
248308 25015 CVE-2007-1658 URL:http://www.securityfocus.com/bid/23103  View
248309 25015 CVE-2007-1658 VUPEN:ADV-2007-2154  View
248310 25015 CVE-2007-1658 URL:http://www.vupen.com/english/advisories/2007/2154  View
248311 25015 CVE-2007-1658 OVAL:oval:org.mitre.oval:def:1861  View
248312 25015 CVE-2007-1658 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1861  View
248313 25015 CVE-2007-1658 SECTRACK:1017816  View
248314 25015 CVE-2007-1658 URL:http://www.securitytracker.com/id?1017816  View
248315 25015 CVE-2007-1658 SECUNIA:25639  View
248316 25015 CVE-2007-1658 URL:http://secunia.com/advisories/25639  View
248317 25015 CVE-2007-1658 XF:win-mail-code-execution(33167)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52132 JVNDB-2007-000795 PCRE ライブラリにおける文字クラスのフォームに関するバッファオーバーフローの脆弱性 Perl-Compatible Regular Expression (PCRE) ライブラリには、文字クラスのフォームのサイズを計算する処理に不備があるために、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-1660 25015 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000795.html  View