NVD

Id
54394  
Name
CVE-2007-2227  
Description
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-06-12  
Modified Date
2012-10-30  
Seq
2007-2227  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275861 54394 CVE-2007-2227 http://archive.openmya.devnull.jp/2007.06/msg00060.html  View
275862 54394 CVE-2007-2227 http://openmya.hacker.jp/hasegawa/security/ms07-034.txt  View
275863 54394 CVE-2007-2227 oval:org.mitre.oval:def:2085  View
275864 54394 CVE-2007-2227 MS07-034  View
275865 54394 CVE-2007-2227 HPSBST02231  View
275866 54394 CVE-2007-2227 20070622 MS07-034: Executing arbitrary script with mhtml: protocol handler  View
275867 54394 CVE-2007-2227 24410  View
275868 54394 CVE-2007-2227 1018233  View
275869 54394 CVE-2007-2227 1018234  View
275870 54394 CVE-2007-2227 TA07-163A  View
275871 54394 CVE-2007-2227 ADV-2007-2154  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51784 JVNDB-2007-000447 Internet Explorer における MHTML によるダウンロードのダイアログボックス回避の脆弱性 Internet Explorer には、MHTML (MIME Encapsulation of Aggregate HTML) でウェブサイトにアクセスする際に、Content-Disposition を正しく処理せず、本来ダウンロードのダイアログボックスが表示されるべき個所で表示しない問題があります。 CVE-2007-2227 25582 CVE-2007-2227 54394 2.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000447.html 2007-06-12 2007-06-28 View