CVE

Id
25584  
CVE No.
CVE-2007-2227  
Status
Candidate  
Description
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."  
Phase
Assigned (20070424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255565 25584 CVE-2007-2227 BUGTRAQ:20070622 MS07-034: Executing arbitrary script with mhtml: protocol handler  View
255566 25584 CVE-2007-2227 URL:http://www.securityfocus.com/archive/1/archive/1/472002/100/0/threaded  View
255567 25584 CVE-2007-2227 MISC:http://archive.openmya.devnull.jp/2007.06/msg00060.html  View
255568 25584 CVE-2007-2227 MISC:http://openmya.hacker.jp/hasegawa/security/ms07-034.txt  View
255569 25584 CVE-2007-2227 HP:HPSBST02231  View
255570 25584 CVE-2007-2227 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
255571 25584 CVE-2007-2227 HP:SSRT071438  View
255572 25584 CVE-2007-2227 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
255573 25584 CVE-2007-2227 MS:MS07-034  View
255574 25584 CVE-2007-2227 URL:http://www.microsoft.com/technet/security/bulletin/ms07-034.mspx  View
255575 25584 CVE-2007-2227 CERT:TA07-163A  View
255576 25584 CVE-2007-2227 URL:http://www.us-cert.gov/cas/techalerts/TA07-163A.html  View
255577 25584 CVE-2007-2227 BID:24410  View
255578 25584 CVE-2007-2227 URL:http://www.securityfocus.com/bid/24410  View
255579 25584 CVE-2007-2227 OSVDB:35346  View
255580 25584 CVE-2007-2227 URL:http://osvdb.org/35346  View
255581 25584 CVE-2007-2227 VUPEN:ADV-2007-2154  View
255582 25584 CVE-2007-2227 URL:http://www.vupen.com/english/advisories/2007/2154  View
255583 25584 CVE-2007-2227 OVAL:oval:org.mitre.oval:def:2085  View
255584 25584 CVE-2007-2227 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2085  View
255585 25584 CVE-2007-2227 SECTRACK:1018233  View
255586 25584 CVE-2007-2227 URL:http://www.securitytracker.com/id?1018233  View
255587 25584 CVE-2007-2227 SECTRACK:1018234  View
255588 25584 CVE-2007-2227 URL:http://www.securitytracker.com/id?1018234  View
255589 25584 CVE-2007-2227 SECUNIA:25639  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51776 JVNDB-2007-000439 Microsoft Windows Vista のインフォメーション ストア ACL に関する情報漏えいの脆弱性 Microsoft Windows Vista では、レジストリやファイルシステムの特定のインフォメーション ストア ACL でのアクセス権の設定に関する不備が存在するため、権限のないユーザに重要なファイルを参照される問題があります。 CVE-2007-2229 25584 7.2 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000439.html  View