PT-2007-3559 · Microsoft · Windows+1

Published 2007-05-08 · Updated 2021-07-23 · CVE-2007-2221

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 SP4 through 7 on various Windows operating systems

Description The issue allows remote attackers to potentially overwrite arbitrary files or execute remote code via specially crafted web pages. An attacker who successfully exploits this could take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01 SP4 through 7, consider restricting access to the mdsauth.dll COM object as a temporary workaround until a patch is available. Avoid visiting untrusted web pages to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-2221

Affected Products

Internet Explorer

Windows

References · 17

• 🔥 https://exploit-db.com/exploits/3892 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2221 · Security Note
• http://securityfocus.com/archive/1/468871/100/200/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2221 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33355 · Note
• http://us-cert.gov/cas/techalerts/TA07-128A.html · Note
• http://osvdb.org/34404 · Note
• http://securitytracker.com/id?1018019 · Note
• http://securityfocus.com/bid/23827 · Note
• http://kb.cert.org/vuls/id/500753 · Note
• http://secunia.com/advisories/23769 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1885 · Note
• http://fortiguardcenter.com/advisory/FGA-2007-07.html · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-027 · Note