PT-2007-1698 · Microsoft · Internet Explorer

Publicado 2007-02-13 · Atualizado 2021-07-23 · CVE-2007-0217

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description A remote code execution issue exists in the way Internet Explorer interprets certain responses from FTP servers. An attacker could exploit this by sending specially crafted FTP responses in an FTP session to the FTP client included in Internet Explorer. This could allow an attacker to gain the same user rights as the local user. Users with fewer user rights on the system could be less impacted than users operating with administrative user rights.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, consider restricting access to FTP servers until a patch is available. As a temporary workaround, avoid using the FTP client functionality in Internet Explorer until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2007-0217

Produtos afetados

Internet Explorer

Referências · 16

• 🔥 https://exploit-db.com/exploits/3444 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1141 · Nota
• http://securityfocus.com/bid/22489 · Nota
• http://securitytracker.com/id?1017642 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-016 · Nota
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Nota
• http://secunia.com/advisories/24156 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0217 · Nota de Segurança
• http://kb.cert.org/vuls/id/613564 · Nota
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473 · Nota
• http://vupen.com/english/advisories/2007/0584 · Nota
• http://osvdb.org/31892 · Nota
• http://securityfocus.com/archive/1/462303/100/0/threaded · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-0217 · Nota de Segurança