PT-2007-6492 · Microsoft · Internet Explorer

Published 2007-10-14 · Updated 2021-07-23 · CVE-2007-5456

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 7 and earlier

Description: The issue allows remote attackers to bypass the "File Download - Security Warning" dialog box and download arbitrary .exe files. This is achieved by placing a '?' (question mark) followed by a non-.exe filename after the .exe filename. Various non-.exe filename extensions can be used, including .txt, .cda, .log, .dif, .sol, .htt, .itpc, .itms, .dvr-ms, .dib, .asf, and .tif. This bypasses an intended protection mechanism, although it might not cross privilege boundaries.

Recommendations: For Microsoft Internet Explorer versions 7 and earlier, consider disabling the download of .exe files or implementing additional security warnings to minimize the risk of exploitation. Restrict access to potentially vulnerable extensions to prevent unintended downloads. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-5456

Affected Products

Internet Explorer

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-5456 · Security Note
• http://securityfocus.com/bid/26062 · Note
• http://securityfocus.com/archive/1/482314/100/0/threaded · Note
• http://securityreason.com/securityalert/3222 · Note
• http://securityfocus.com/archive/1/482248/100/0/threaded · Note
• http://securityfocus.com/archive/1/482297/100/0/threaded · Note
• http://securityfocus.com/archive/1/482220/100/0/threaded · Note