CVE

Id
26907  
CVE No.
CVE-2007-3550  
Status
Candidate  
Description
** DISPUTED ** Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wildcards via JavaScript, which results in a denial of service (website suppression and resource consumption), aka "Internet Explorer Zone Domain Specification Dos and Page Suppressing". NOTE: this issue has been disputed by a third party, who states that the zone settings cannot be manipulated.  
Phase
Assigned (20070703)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
274649 26907 CVE-2007-3550 BUGTRAQ:20070701 Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing.  View
274650 26907 CVE-2007-3550 URL:http://www.securityfocus.com/archive/1/archive/1/472651/100/0/threaded  View
274651 26907 CVE-2007-3550 BUGTRAQ:20070712 Bogus BID 24744  View
274652 26907 CVE-2007-3550 URL:http://www.securityfocus.com/archive/1/473662  View
274653 26907 CVE-2007-3550 BUGTRAQ:20071222 Bid 24744 ?  View
274654 26907 CVE-2007-3550 URL:http://www.securityfocus.com/archive/1/archive/1/485536/100/0/threaded  View
274655 26907 CVE-2007-3550 FULLDISC:20070701 Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing.  View
274656 26907 CVE-2007-3550 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064326.html  View
274657 26907 CVE-2007-3550 MISC:http://www.secniche.org/advisory/Internet_Dos_Adv.pdf  View
274658 26907 CVE-2007-3550 BID:24744  View
274659 26907 CVE-2007-3550 URL:http://www.securityfocus.com/bid/24744  View
274660 26907 CVE-2007-3550 OSVDB:45814  View
274661 26907 CVE-2007-3550 URL:http://osvdb.org/45814  View
274662 26907 CVE-2007-3550 SREASON:2855  View
274663 26907 CVE-2007-3550 URL:http://securityreason.com/securityalert/2855  View
274664 26907 CVE-2007-3550 XF:ie-zone-dos(35455)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53587 JVNDB-2007-002279 bbs100 におけるサービス運用妨害 (DoS) の脆弱性 bbs100 には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2007-3552 26907 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002279.html  View