PT-2007-3563 · Microsoft · Windows Vista+3

Publicado 2007-06-12 · Atualizado 2018-10-16 · CVE-2007-2225

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook Express version 6 Windows Mail in Windows Vista

Description A component does not properly handle certain HTTP headers when processing MHTML protocol URLs, allowing remote attackers to obtain sensitive information from other Internet Explorer domains.

Recommendations For Microsoft Outlook Express version 6, update to a version that properly handles HTTP headers for MHTML protocol URLs. For Windows Mail in Windows Vista, apply the necessary configuration changes to ensure proper handling of HTTP headers for MHTML protocol URLs.

Correção

Identificadores relacionados

CVE-2007-2225

Produtos afetados

Internet Explorer

Outlook Express

Windows Mail

Windows Vista

Referências · 15

• http://openmya.hacker.jp/hasegawa/security/ms07-034.txt · Nota
• http://kb.cert.org/vuls/id/682825 · Nota
• http://securityfocus.com/archive/1/471947/100/0/threaded · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-2225 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2045 · Nota
• http://osvdb.org/35345 · Nota
• http://securityfocus.com/archive/1/472002/100/0/threaded · Nota
• http://securitytracker.com/id?1018231 · Nota
• http://us-cert.gov/cas/techalerts/TA07-163A.html · Nota
• http://secunia.com/advisories/25639 · Nota
• http://securityfocus.com/bid/24392 · Nota
• http://securitytracker.com/id?1018232 · Nota
• http://archive.openmya.devnull.jp/2007.06/msg00060.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2154 · Nota