NVD

Id
57521  
Name
CVE-2007-5456  
Description
Microsoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files by placing a "?" (question mark) followed by a non-.exe filename after the .exe filename, as demonstrated by (1) .txt, (2) .cda, (3) .log, (4) .dif, (5) .sol, (6) .htt, (7) .itpc, (8) .itms, (9) .dvr-ms, (10) .dib, (11) .asf, (12) .tif, and unspecified other extensions, a different issue than CVE-2004-1331. NOTE: this issue might not cross privilege boundaries, although it does bypass an intended protection mechanism.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-10-14  
Modified Date
2008-09-05  
Seq
2007-5456  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
294259 57521 CVE-2007-5456 3222  View
294260 57521 CVE-2007-5456 20071012 playing for fun with <=IE7  View
294261 57521 CVE-2007-5456 20071013 RE: playing for fun with <=IE7  View
294262 57521 CVE-2007-5456 20071015 RE: playing for fun with <=IE7  View
294263 57521 CVE-2007-5456 20071015 Re: RE: playing for fun with <=IE7  View
294264 57521 CVE-2007-5456 26062  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55828 JVNDB-2007-004520 Microsoft Internet Explorer 7 における任意の .exe ファイルをダウンロードされる脆弱性 Microsoft Internet Explorer 7 には、"ファイルダウンロード - セキュリティ警告" ダイアログボックスを回避される、および任意の .exe ファイルをダウンロードされる脆弱性が存在します。 CVE-2007-5456 28811 CVE-2007-5456 57521 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004520.html 2007-10-14 2012-09-25 View