PT-2007-3559 · Microsoft · Windows+1

Publicado 2007-05-08 · Atualizado 2021-07-23 · CVE-2007-2221

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 through 7 on various Windows operating systems

Description The issue allows remote attackers to potentially overwrite arbitrary files or execute remote code via specially crafted web pages. An attacker who successfully exploits this could take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 through 7, consider restricting access to the mdsauth.dll COM object as a temporary workaround until a patch is available. Avoid visiting untrusted web pages to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2221

Produtos afetados

Internet Explorer

Windows

Referências · 17

• 🔥 https://exploit-db.com/exploits/3892 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33355 · Nota
• http://us-cert.gov/cas/techalerts/TA07-128A.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2221 · Nota de Segurança
• http://osvdb.org/34404 · Nota
• http://securityfocus.com/archive/1/468871/100/200/threaded · Aviso do Fabricante
• http://securitytracker.com/id?1018019 · Nota
• http://securityfocus.com/bid/23827 · Nota
• http://kb.cert.org/vuls/id/500753 · Nota
• http://secunia.com/advisories/23769 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1885 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2221 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 · Aviso do Fabricante
• http://fortiguardcenter.com/advisory/FGA-2007-07.html · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-027 · Nota