PT-2007-6492 · Microsoft · Internet Explorer

Publicado 2007-10-14 · Atualizado 2021-07-23 · CVE-2007-5456

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 and earlier

Description: The issue allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files. This is achieved by placing a '?' (question mark) followed by a non-.exe filename after the .exe filename. Various non-.exe filename extensions can be used, including .txt, .cda, .log, .dif, .sol, .htt, .itpc, .itms, .dvr-ms, .dib, .asf, and .tif. This bypasses an intended protection mechanism, although it might not cross privilege boundaries.

Recommendations: For Microsoft Internet Explorer versions 7 and earlier, consider disabling the download of .exe files or implementing additional security warnings to minimize the risk of exploitation. Restrict access to potentially vulnerable extensions to prevent unintended downloads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-5456

Produtos afetados

Internet Explorer

Referências · 7

• http://securityfocus.com/bid/26062 · Nota
• http://securityfocus.com/archive/1/482314/100/0/threaded · Nota
• http://securityreason.com/securityalert/3222 · Nota
• http://securityfocus.com/archive/1/482248/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5456 · Nota de Segurança
• http://securityfocus.com/archive/1/482297/100/0/threaded · Nota
• http://securityfocus.com/archive/1/482220/100/0/threaded · Nota