CVE-2007-2227

Currently unrated

Key Information:

Vendor
Microsoft
Status
Outlook Express
Vendor
CVE Published:
12 June 2007

Summary

The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."

References

https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.securityfocus.com/archive/1/471947/100/0/threaded
vendor-advisoryx_refsource_HP
http://openmya.hacker.jp/hasegawa/security/ms07-034.txt
x_refsource_MISC

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.