CVE

Id
26390  
CVE No.
CVE-2007-3033  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.  
Phase
Assigned (20070605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
267314 26390 CVE-2007-3033 IDEFENSE:20070814 Microsoft Windows Vista Sidebar RSS Feeds Gadget Cross Site Scripting Vulnerability  View
267315 26390 CVE-2007-3033 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=575  View
267316 26390 CVE-2007-3033 MS:MS07-048  View
267317 26390 CVE-2007-3033 URL:http://www.microsoft.com/technet/security/bulletin/ms07-048.mspx  View
267318 26390 CVE-2007-3033 CERT:TA07-226A  View
267319 26390 CVE-2007-3033 URL:http://www.us-cert.gov/cas/techalerts/TA07-226A.html  View
267320 26390 CVE-2007-3033 CERT-VN:VU#558648  View
267321 26390 CVE-2007-3033 URL:http://www.kb.cert.org/vuls/id/558648  View
267322 26390 CVE-2007-3033 BID:25287  View
267323 26390 CVE-2007-3033 URL:http://www.securityfocus.com/bid/25287  View
267324 26390 CVE-2007-3033 VUPEN:ADV-2007-2872  View
267325 26390 CVE-2007-3033 URL:http://www.vupen.com/english/advisories/2007/2872  View
267326 26390 CVE-2007-3033 OVAL:oval:org.mitre.oval:def:2152  View
267327 26390 CVE-2007-3033 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2152  View
267328 26390 CVE-2007-3033 SECTRACK:1018566  View
267329 26390 CVE-2007-3033 URL:http://www.securitytracker.com/id?1018566  View
267330 26390 CVE-2007-3033 SECUNIA:26439  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51943 JVNDB-2007-000606 Microsoft Windows Media Player のスキンファイルのヘッダ処理における任意のコードを実行可能な脆弱性 Microsoft Windows Media Player には、スキンファイル (WMZ ファイルや WMD ファイル) のヘッダ情報の処理に不備が存在するために、スキンファイルの展開の際に任意のコードを実行される脆弱性が存在します。 CVE-2007-3035 26390 7.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000606.html  View