CVE-2007-2225
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 25%
exploitation probability
25%top 2% of all CVEs
observed exploitation
nono source reports it
A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."
Affected products
n/a · n/aReferences
http://archive.openmya.devnull.jp/2007.06/msg00060.htmlhttp://openmya.hacker.jp/hasegawa/security/ms07-034.txthttp://osvdb.org/35345https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034http://secunia.com/advisories/25639https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2045http://www.kb.cert.org/vuls/id/682825http://www.securityfocus.com/archive/1/471947/100/0/threadedhttp://www.securityfocus.com/archive/1/472002/100/0/threadedhttp://www.securityfocus.com/bid/24392http://www.securitytracker.com/id?1018231http://www.securitytracker.com/id?1018232