5.8

CVE-2007-3164

EPSS 9.85%
Veröffentlicht 11.06.2007 22:30:00
Zuletzt bearbeitet 16.06.2026 22:41:11
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if the user misinterprets confusable characters in the internationalized labels, as demonstrated by displaying xn--theshmogroup-bgk.com only in the status bar.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 9

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version7.0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	9.85%	0.949

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://ha.ckers.org/blog/20070608/cross-domain-basic-auth-phishing-tactics/

http://osvdb.org/36142

http://secunia.com/advisories/25663

http://www.bitsploit.de/archives/428-Cross-Domain-Basic-Auth-Phishing-Tactics.html

http://www.securityfocus.com/bid/24483

https://exchange.xforce.ibmcloud.com/vulnerabilities/34867

https://nvd.nist.gov/vuln/detail/CVE-2007-3164

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3164

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3164

EUVD