CVE-2007-3033
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 28%
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.
Produtos afetados
n/a · n/aReferências
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=575https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-048http://secunia.com/advisories/26439https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2152http://www.kb.cert.org/vuls/id/558648http://www.securityfocus.com/bid/25287http://www.securitytracker.com/id?1018566http://www.us-cert.gov/cas/techalerts/TA07-226A.htmlhttp://www.vupen.com/english/advisories/2007/2872