NVD

Id
53842  
Name
CVE-2007-1658  
Description
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe).  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-03-24  
Modified Date
2012-11-05  
Seq
2007-1658  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272828 53842 CVE-2007-1658 20070323 Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability  View
272829 53842 CVE-2007-1658 20070323 Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability  View
272830 53842 CVE-2007-1658 20070323 Re: Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability  View
272831 53842 CVE-2007-1658 http://isc.sans.org/diary.html?storyid=2507  View
272832 53842 CVE-2007-1658 http://news.com.com/2100-1002_3-6170133.html  View
272833 53842 CVE-2007-1658 oval:org.mitre.oval:def:1861  View
272834 53842 CVE-2007-1658 http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=9014194  View
272835 53842 CVE-2007-1658 MS07-034  View
272836 53842 CVE-2007-1658 HPSBST02231  View
272837 53842 CVE-2007-1658 23103  View
272838 53842 CVE-2007-1658 1017816  View
272839 53842 CVE-2007-1658 TA07-163A  View
272840 53842 CVE-2007-1658 ADV-2007-2154  View
272841 53842 CVE-2007-1658 win-mail-code-execution(33167)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51785 JVNDB-2007-000448 Microsoft Windows メールの不適切なファイルパスの処理による脆弱性 Microsoft Windows Vista の Windows メールには、メール内においてシステム上のファイルパスや UNC パスで実行ファイルが指定されている場合、そのファイルを実行してしまう問題があります。 CVE-2007-1658 25013 CVE-2007-1658 53842 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000448.html 2007-03-24 2007-06-19 View