Lucene search
HistoryJun 07, 2007 - 9:30 p.m.
CVE-2007-3109
cve-2007-3109
cern image map dispatcher
microsoft frontpage
vulnerability
remote attack
file access
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.8%
The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.
Affected configurations
Node
microsoftfrontpage
ORmicrosoftoffice
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:frontpage | microsoft frontpage | eq | * |
| microsoft:office | microsoft office | eq | * |
Related
prion
prion
Code injection
2007-06-07 21:30:00
nvd
nvd
CVE-2007-3109
2007-06-07 21:30:00
cvelist
cvelist
CVE-2007-3109
2007-06-07 21:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.8%
Related for CVE-2007-3109