Vulnerability Details CVE-2007-3930
Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary JavaScript and conduct cross-site scripting (XSS) attacks when spellchecking UTF-8 encoded messages via the spell_utf8test function in lib/exe/spellcheck.php, which triggers HTML document identification and script execution by Internet Explorer even though the Content-Type header is text/plain.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.172
EPSS Ranking 94.7%
CVSS Severity
CVSS v2 Score 4.3
References
- http://bugs.splitbrain.org/index.php?do=details&task_id=1195
- http://osvdb.org/38319
- http://secunia.com/advisories/26150
- http://securityreason.com/securityalert/2908
- http://wiki.splitbrain.org/wiki%3Achanges
- http://www.securityfocus.com/archive/1/474144/100/0/threaded
- http://www.securityfocus.com/bid/24973
- http://www.vupen.com/english/advisories/2007/2617
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35501
- http://bugs.splitbrain.org/index.php?do=details&task_id=1195
- http://osvdb.org/38319
- http://secunia.com/advisories/26150
- http://securityreason.com/securityalert/2908
- http://wiki.splitbrain.org/wiki%3Achanges
- http://www.securityfocus.com/archive/1/474144/100/0/threaded
- http://www.securityfocus.com/bid/24973
- http://www.vupen.com/english/advisories/2007/2617
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35501
Products affected by CVE-2007-3930
-
cpe:2.3:a:microsoft:internet_explorer:-
-
cpe:2.3:a:microsoft:internet_explorer:10
-
cpe:2.3:a:microsoft:internet_explorer:11
-
cpe:2.3:a:microsoft:internet_explorer:3.0
-
cpe:2.3:a:microsoft:internet_explorer:3.0.1
-
cpe:2.3:a:microsoft:internet_explorer:3.0.2
-
cpe:2.3:a:microsoft:internet_explorer:3.1
-
cpe:2.3:a:microsoft:internet_explorer:3.2
-
cpe:2.3:a:microsoft:internet_explorer:4.0
-
cpe:2.3:a:microsoft:internet_explorer:4.0.1
-
cpe:2.3:a:microsoft:internet_explorer:4.01
-
cpe:2.3:a:microsoft:internet_explorer:4.1
-
cpe:2.3:a:microsoft:internet_explorer:4.40.308
-
cpe:2.3:a:microsoft:internet_explorer:4.40.520
-
cpe:2.3:a:microsoft:internet_explorer:4.5
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1155
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1158
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1215
-
cpe:2.3:a:microsoft:internet_explorer:4.70.1300
-
cpe:2.3:a:microsoft:internet_explorer:4.71.1008.3
-
cpe:2.3:a:microsoft:internet_explorer:4.71.1712.6
-
cpe:2.3:a:microsoft:internet_explorer:4.71.544
-
cpe:2.3:a:microsoft:internet_explorer:4.72.2106.8
-
cpe:2.3:a:microsoft:internet_explorer:4.72.3110.8
-
cpe:2.3:a:microsoft:internet_explorer:4.72.3612.1713
-
cpe:2.3:a:microsoft:internet_explorer:5
-
cpe:2.3:a:microsoft:internet_explorer:5.0
-
cpe:2.3:a:microsoft:internet_explorer:5.0.1
-
cpe:2.3:a:microsoft:internet_explorer:5.00.0518.10
-
cpe:2.3:a:microsoft:internet_explorer:5.00.0910.1309
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2014.0216
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2314.1003
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800
-
cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000
-
cpe:2.3:a:microsoft:internet_explorer:5.01
-
cpe:2.3:a:microsoft:internet_explorer:5.1
-
cpe:2.3:a:microsoft:internet_explorer:5.2.3
-
cpe:2.3:a:microsoft:internet_explorer:5.5
-
cpe:2.3:a:microsoft:internet_explorer:5.50.3825.1300
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4030.2400
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0100
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4134.0600
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4308.2900
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4522.1800
-
cpe:2.3:a:microsoft:internet_explorer:5.50.4807.2300
-
cpe:2.3:a:microsoft:internet_explorer:6
-
cpe:2.3:a:microsoft:internet_explorer:6.0
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2600
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2800
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2900
-
cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106
-
cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3718.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830
-
cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959
-
cpe:2.3:a:microsoft:internet_explorer:7
-
cpe:2.3:a:microsoft:internet_explorer:7.0
-
cpe:2.3:a:microsoft:internet_explorer:7.0.5730
-
cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11
-
cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100
-
cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386
-
cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441
-
cpe:2.3:a:microsoft:internet_explorer:8
-
cpe:2.3:a:microsoft:internet_explorer:8.0.6001
-
cpe:2.3:a:microsoft:internet_explorer:9
-
cpe:2.3:a:wiki:dokuwiki:*