NVD

Id
54393  
Name
CVE-2007-2225  
Description
A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-06-12  
Modified Date
2012-10-30  
Seq
2007-2225  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275849 54393 CVE-2007-2225 http://archive.openmya.devnull.jp/2007.06/msg00060.html  View
275850 54393 CVE-2007-2225 http://openmya.hacker.jp/hasegawa/security/ms07-034.txt  View
275851 54393 CVE-2007-2225 oval:org.mitre.oval:def:2045  View
275852 54393 CVE-2007-2225 VU#682825  View
275853 54393 CVE-2007-2225 MS07-034  View
275854 54393 CVE-2007-2225 SSRT071438  View
275855 54393 CVE-2007-2225 20070622 MS07-034: Executing arbitrary script with mhtml: protocol handler  View
275856 54393 CVE-2007-2225 24392  View
275857 54393 CVE-2007-2225 1018231  View
275858 54393 CVE-2007-2225 1018232  View
275859 54393 CVE-2007-2225 TA07-163A  View
275860 54393 CVE-2007-2225 ADV-2007-2154  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51783 JVNDB-2007-000446 Internet Explorer における MHTML により任意のスクリプトが実行される脆弱性 Internet Explorer には、MHTML (MIME Encapsulation of Aggregate HTML) により任意のスクリプトが実行される脆弱性が存在します。 CVE-2007-2225 25580 CVE-2007-2225 54393 2.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000446.html 2007-06-12 2007-06-19 View