4.3

CVE-2007-1499

Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navigation Canceled" page and injects the script into the "Refresh the page" link, aka Navigation Cancel Page Spoofing Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Ie Version7.0 Editionvista
Microsoft ≫ Ie Version7.0 Editionvista
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 29.78% 0.98
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://www.securityfocus.com/archive/1/471947/100/0/threaded
http://www.us-cert.gov/cas/techalerts/TA07-163A.html
US Government Resource
http://aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx
Vendor Advisory
http://news.com.com/2100-1002_3-6167410.html
http://osvdb.org/35352
http://secunia.com/advisories/24535
Vendor Advisory
http://secunia.com/advisories/25627
Vendor Advisory
http://securityreason.com/securityalert/2448
http://securitytracker.com/id?1018235
http://www.securityfocus.com/archive/1/462833/100/0/threaded
http://www.securityfocus.com/archive/1/462939/100/0/threaded
http://www.securityfocus.com/archive/1/462945/100/0/threaded
http://www.securityfocus.com/bid/22966
http://www.vupen.com/english/advisories/2007/0946
http://www.vupen.com/english/advisories/2007/2153
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033
https://exchange.xforce.ibmcloud.com/vulnerabilities/33026
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1715