Vulnerability Details CVE-2007-1090
Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed WMF file, which triggers the crash when the user browses the folder.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.61
EPSS Ranking 98.2%
CVSS Severity
CVSS v2 Score 7.1
References
- http://osvdb.org/34490
- http://securityvulns.com/Qdocument170.html
- http://securityvulns.com/news/Microsoft/Windows/Explorer/DoS.html
- http://www.securityfocus.com/archive/1/461373/100/0/threaded
- http://www.securityfocus.com/bid/22715
- http://osvdb.org/34490
- http://securityvulns.com/Qdocument170.html
- http://securityvulns.com/news/Microsoft/Windows/Explorer/DoS.html
- http://www.securityfocus.com/archive/1/461373/100/0/threaded
- http://www.securityfocus.com/bid/22715
Products affected by CVE-2007-1090
-
cpe:2.3:a:microsoft:windows_explorer:-
-
cpe:2.3:o:microsoft:windows_2003_server:-
-
cpe:2.3:o:microsoft:windows_xp:-
-
cpe:2.3:o:microsoft:windows_xp:sp2
-
cpe:2.3:o:microsoft:windows_xp:sp3
-
cpe:2.3:o:microsoft:windows_xp:unknown