PT-2007-2891 · Microsoft · Internet Explorer

Published 2007-03-17 · Updated 2018-10-16 · CVE-2007-1499

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 7.0

Description A spoofing issue exists that could allow an attacker to display spoofed content, potentially leading to remote code execution. This could be exploited by constructing a specially crafted web page. If successfully exploited, an attacker could take complete control of an affected system.

Recommendations For Microsoft Internet Explorer version 7.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2007-1499

Affected Products

Internet Explorer

References · 26

• 🔥 https://exploit-db.com/exploits/29741 · Exploit
• http://secunia.com/advisories/25627 · Vendor Advisory
• http://secunia.com/advisories/24535 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1499 · Security Note
• http://securityfocus.com/archive/1/471947/100/0/threaded · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-1499 · Security Note
• http://aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx · Vendor Advisory
• http://securityfocus.com/archive/1/archive/1/462939/100/0/threaded · Note
• http://securityfocus.com/archive/1/462939/100/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/462945/100/0/threaded · Note
• http://us-cert.gov/cas/techalerts/TA07-163A.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33026 · Note
• http://securityfocus.com/archive/1/archive/1/462833/100/0/threaded · Note
• http://news.com.com/2100-1002_3-6167410.html · Note