NVD

Id
55187  
Name
CVE-2007-3033  
Description
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-08-14  
Modified Date
2011-03-15  
Seq
2007-3033  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
280433 55187 CVE-2007-3033 20070814 Microsoft Windows Vista Sidebar RSS Feeds Gadget Cross Site Scripting Vulnerability  View
280434 55187 CVE-2007-3033 oval:org.mitre.oval:def:2152  View
280435 55187 CVE-2007-3033 VU#558648  View
280436 55187 CVE-2007-3033 MS07-048  View
280437 55187 CVE-2007-3033 25287  View
280438 55187 CVE-2007-3033 1018566  View
280439 55187 CVE-2007-3033 TA07-226A  View
280440 55187 CVE-2007-3033 ADV-2007-2872  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51946 JVNDB-2007-000609 Microsoft Windows Vista のフィードヘッドラインのガジェットにおけるクロスサイトスクリプティングの脆弱性 Microsoft Windows Vista のフィードヘッドラインのガジェットには、HTML 属性の検証を十分に行わないために、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-3033 26388 CVE-2007-3033 55187 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000609.html 2007-08-14 2008-08-14 View