CVE-2007-2225

EPSS 25.04%
Veröffentlicht 12.06.2007 20:30:00
Zuletzt bearbeitet 16.06.2026 22:39:10
Erkennungen
Login

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 17

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Outlook Express Version 6.0

   Microsoft ≫ Windows 2003 Server Edition x64
   Microsoft ≫ Windows 2003 Server Update sp2 Edition x64
   Microsoft ≫ Windows 2003 Server Version sp1
   Microsoft ≫ Windows 2003 Server Version sp1 Edition itanium
   Microsoft ≫ Windows 2003 Server Version sp2 Edition itanium
   Microsoft ≫ Windows Xp Edition professional_x64
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp2 Edition professional_x64

Microsoft ≫ Windows Mail

Microsoft ≫ Windows Vista Update gold
Microsoft ≫ Windows Vista Update gold Edition x64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	25.04%	0.976

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:P/I:N/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.securityfocus.com/archive/1/471947/100/0/threaded

http://www.us-cert.gov/cas/techalerts/TA07-163A.html

US Government Resource

http://www.vupen.com/english/advisories/2007/2154

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034

http://secunia.com/advisories/25639

http://archive.openmya.devnull.jp/2007.06/msg00060.html

http://openmya.hacker.jp/hasegawa/security/ms07-034.txt

http://osvdb.org/35345

http://www.kb.cert.org/vuls/id/682825

US Government Resource

http://www.securityfocus.com/archive/1/472002/100/0/threaded

http://www.securityfocus.com/bid/24392

http://www.securitytracker.com/id?1018231

http://www.securitytracker.com/id?1018232

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2045

https://nvd.nist.gov/vuln/detail/CVE-2007-2225

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-2225

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-2225

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2007-2225