PT-2007-1698 · Microsoft · Internet Explorer

Published 2007-02-13 · Updated 2021-07-23 · CVE-2007-0217

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description A remote code execution issue exists in the way Internet Explorer interprets certain responses from FTP servers. An attacker could exploit this by sending specially crafted FTP responses in an FTP session to the FTP client included in Internet Explorer. This could allow an attacker to gain the same user rights as the local user. Users with fewer user rights on the system could be less impacted than users operating with administrative user rights.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, consider restricting access to FTP servers until a patch is available. As a temporary workaround, avoid using the FTP client functionality in Internet Explorer until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-0217

Affected Products

Internet Explorer

References · 16

• 🔥 https://exploit-db.com/exploits/3444 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0217 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0217 · Security Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1141 · Note
• http://securityfocus.com/bid/22489 · Note
• http://securitytracker.com/id?1017642 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-016 · Note
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Note
• http://secunia.com/advisories/24156 · Note
• http://kb.cert.org/vuls/id/613564 · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473 · Note
• http://vupen.com/english/advisories/2007/0584 · Note
• http://osvdb.org/31892 · Note
• http://securityfocus.com/archive/1/462303/100/0/threaded · Note