NVD

Id
52446  
Name
CVE-2007-0217  
Description
The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-02-13  
Modified Date
2011-03-07  
Seq
2007-0217  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
264942 52446 CVE-2007-0217 20070213 Microsoft "wininet.dll" FTP Reply Null Termination Heap Corruption Vulnerability  View
264943 52446 CVE-2007-0217 oval:org.mitre.oval:def:1141  View
264944 52446 CVE-2007-0217 VU#613564  View
264945 52446 CVE-2007-0217 MS07-016  View
264946 52446 CVE-2007-0217 20070309 MS07-016 FTP Response DOS PoC  View
264947 52446 CVE-2007-0217 22489  View
264948 52446 CVE-2007-0217 1017642  View
264949 52446 CVE-2007-0217 TA07-044A  View
264950 52446 CVE-2007-0217 ADV-2007-0584  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51484 JVNDB-2007-000146 Microsoft Internet Explorer における不正な FTP サーバレスポンスによるメモリ破壊の脆弱性 Microsoft Internet Explorer の FTP クライアントコード部 (wininet.dll) には、FTP サーバからのレスポンスを処理する際の不備により、ヒープメモリ領域が破壊される脆弱性が存在します。 CVE-2007-0217 23572 CVE-2007-0217 52446 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000146.html 2007-02-13 2007-04-01 View