CVE

Id
25582  
CVE No.
CVE-2007-2225  
Status
Candidate  
Description
A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."  
Phase
Assigned (20070424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255538 25582 CVE-2007-2225 BUGTRAQ:20070622 MS07-034: Executing arbitrary script with mhtml: protocol handler  View
255539 25582 CVE-2007-2225 URL:http://www.securityfocus.com/archive/1/archive/1/472002/100/0/threaded  View
255540 25582 CVE-2007-2225 MISC:http://archive.openmya.devnull.jp/2007.06/msg00060.html  View
255541 25582 CVE-2007-2225 MISC:http://openmya.hacker.jp/hasegawa/security/ms07-034.txt  View
255542 25582 CVE-2007-2225 HP:HPSBST02231  View
255543 25582 CVE-2007-2225 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
255544 25582 CVE-2007-2225 HP:SSRT071438  View
255545 25582 CVE-2007-2225 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
255546 25582 CVE-2007-2225 MS:MS07-034  View
255547 25582 CVE-2007-2225 URL:http://www.microsoft.com/technet/security/bulletin/ms07-034.mspx  View
255548 25582 CVE-2007-2225 CERT:TA07-163A  View
255549 25582 CVE-2007-2225 URL:http://www.us-cert.gov/cas/techalerts/TA07-163A.html  View
255550 25582 CVE-2007-2225 CERT-VN:VU#682825  View
255551 25582 CVE-2007-2225 URL:http://www.kb.cert.org/vuls/id/682825  View
255552 25582 CVE-2007-2225 BID:24392  View
255553 25582 CVE-2007-2225 URL:http://www.securityfocus.com/bid/24392  View
255554 25582 CVE-2007-2225 OSVDB:35345  View
255555 25582 CVE-2007-2225 URL:http://osvdb.org/35345  View
255556 25582 CVE-2007-2225 VUPEN:ADV-2007-2154  View
255557 25582 CVE-2007-2225 URL:http://www.vupen.com/english/advisories/2007/2154  View
255558 25582 CVE-2007-2225 OVAL:oval:org.mitre.oval:def:2045  View
255559 25582 CVE-2007-2225 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2045  View
255560 25582 CVE-2007-2225 SECTRACK:1018231  View
255561 25582 CVE-2007-2225 URL:http://www.securitytracker.com/id?1018231  View
255562 25582 CVE-2007-2225 SECTRACK:1018232  View
255563 25582 CVE-2007-2225 URL:http://www.securitytracker.com/id?1018232  View
255564 25582 CVE-2007-2225 SECUNIA:25639  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51784 JVNDB-2007-000447 Internet Explorer における MHTML によるダウンロードのダイアログボックス回避の脆弱性 Internet Explorer には、MHTML (MIME Encapsulation of Aggregate HTML) でウェブサイトにアクセスする際に、Content-Disposition を正しく処理せず、本来ダウンロードのダイアログボックスが表示されるべき個所で表示しない問題があります。 CVE-2007-2227 25582 2.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000447.html  View