CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2227

The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.519

EPSS Ranking 97.7%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2007-2227

Microsoft » Outlook Express » Version: 6.0

cpe:2.3:a:microsoft:outlook_express:6.0
Microsoft » Windows Mail » Version: N/A

cpe:2.3:a:microsoft:windows_mail:-
Microsoft » Windows 2003 Server » Version: N/A

cpe:2.3:o:microsoft:windows_2003_server:-
Microsoft » Windows 2003 Server » Version: sp1

cpe:2.3:o:microsoft:windows_2003_server:sp1
Microsoft » Windows 2003 Server » Version: sp2

cpe:2.3:o:microsoft:windows_2003_server:sp2
Microsoft » Windows Vista » Version: Any

cpe:2.3:o:microsoft:windows_vista:*
Microsoft » Windows Vista » Version: N/A

cpe:2.3:o:microsoft:windows_vista:-
Microsoft » Windows Xp » Version: Any

cpe:2.3:o:microsoft:windows_xp:*
Microsoft » Windows Xp » Version: N/A

cpe:2.3:o:microsoft:windows_xp:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-2227

Products

Pricing

Contact Us