Lucene search

MitreCVE-2007-1091

HistoryFeb 26, 2007 - 11:28 a.m.

CVE-2007-1091

2007-02-2611:28:00

mitre

web.nvd.nist.gov

microsoft

internet explorer

ie7

vulnerability

remote attackers

phishing

address bar manipulation

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.245

Percentile

96.7%

JSON

Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers.

Affected configurations

Nvd

Node

microsoftieMatch6.0sp1

microsoftieMatch6.0sp2

microsoftieMatch7.0vista

microsoftinternet_explorerMatch6.0

VendorProductVersionCPE
microsoftie6.0cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
microsoftie6.0cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
microsoftie7.0cpe:2.3:a:microsoft:ie:7.0:*:vista:*:*:*:*:*
microsoftinternet_explorer6.0cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	ie	6.0	cpe:2.3:a:microsoft:ie:6.0:sp1::::::
microsoft	ie	6.0	cpe:2.3:a:microsoft:ie:6.0:sp2::::::
microsoft	ie	7.0	cpe:2.3:a:microsoft:ie:7.0::vista:::::
microsoft	internet_explorer	6.0	cpe:2.3:a:microsoft:internet_explorer:6.0:::::::*

References

lcamtuf.coredump.cx/ietrap

lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.html

secunia.com/advisories/23014

securityreason.com/securityalert/2291

securitytracker.com/id?1018788

www.securityfocus.com/archive/1/461023/100/0/threaded

www.securityfocus.com/archive/1/461027/100/0/threaded

www.securityfocus.com/archive/1/482366/100/0/threaded

www.securityfocus.com/bid/22680

www.us-cert.gov/cas/techalerts/TA07-282A.html

www.vupen.com/english/advisories/2007/0713

docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057

exchange.xforce.ibmcloud.com/vulnerabilities/32647

exchange.xforce.ibmcloud.com/vulnerabilities/32649

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2162

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.245

Percentile

96.7%

JSON

Related for CVE-2007-1091