CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-4040

Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.18

EPSS Ranking 94.8%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 4.3

References

Products affected by CVE-2007-4040

Microsoft » Outlook » Version: N/A

cpe:2.3:a:microsoft:outlook:-
Microsoft » Outlook » Version: 2000

cpe:2.3:a:microsoft:outlook:2000
Microsoft » Outlook » Version: 2002

cpe:2.3:a:microsoft:outlook:2002
Microsoft » Outlook » Version: 2003

cpe:2.3:a:microsoft:outlook:2003
Microsoft » Outlook » Version: 2007

cpe:2.3:a:microsoft:outlook:2007
Microsoft » Outlook » Version: 2010

cpe:2.3:a:microsoft:outlook:2010
Microsoft » Outlook » Version: 2011

cpe:2.3:a:microsoft:outlook:2011
Microsoft » Outlook » Version: 2013

cpe:2.3:a:microsoft:outlook:2013
Microsoft » Outlook » Version: 2016

cpe:2.3:a:microsoft:outlook:2016
Microsoft » Outlook » Version: 3.12.0

cpe:2.3:a:microsoft:outlook:3.12.0
Microsoft » Outlook » Version: 3.13.0

cpe:2.3:a:microsoft:outlook:3.13.0
Microsoft » Outlook » Version: 3.14.0

cpe:2.3:a:microsoft:outlook:3.14.0
Microsoft » Outlook » Version: 3.15.0

cpe:2.3:a:microsoft:outlook:3.15.0
Microsoft » Outlook » Version: 3.16.0

cpe:2.3:a:microsoft:outlook:3.16.0
Microsoft » Outlook » Version: 3.17.0

cpe:2.3:a:microsoft:outlook:3.17.0
Microsoft » Outlook » Version: 3.17.1

cpe:2.3:a:microsoft:outlook:3.17.1
Microsoft » Outlook » Version: 3.18.0

cpe:2.3:a:microsoft:outlook:3.18.0
Microsoft » Outlook » Version: 3.20.0

cpe:2.3:a:microsoft:outlook:3.20.0
Microsoft » Outlook » Version: 3.21.0

cpe:2.3:a:microsoft:outlook:3.21.0
Microsoft » Outlook » Version: 3.22.0

cpe:2.3:a:microsoft:outlook:3.22.0
Microsoft » Outlook » Version: 3.22.1

cpe:2.3:a:microsoft:outlook:3.22.1
Microsoft » Outlook » Version: 3.23.0

cpe:2.3:a:microsoft:outlook:3.23.0
Microsoft » Outlook » Version: 3.24.0

cpe:2.3:a:microsoft:outlook:3.24.0
Microsoft » Outlook » Version: 3.24.1

cpe:2.3:a:microsoft:outlook:3.24.1
Microsoft » Outlook » Version: 3.25.0

cpe:2.3:a:microsoft:outlook:3.25.0
Microsoft » Outlook » Version: 3.26.0

cpe:2.3:a:microsoft:outlook:3.26.0
Microsoft » Outlook » Version: 3.27.0

cpe:2.3:a:microsoft:outlook:3.27.0
Microsoft » Outlook » Version: 3.27.1

cpe:2.3:a:microsoft:outlook:3.27.1
Microsoft » Outlook » Version: 3.28.0

cpe:2.3:a:microsoft:outlook:3.28.0
Microsoft » Outlook » Version: 3.29.0

cpe:2.3:a:microsoft:outlook:3.29.0
Microsoft » Outlook » Version: 3.30.0

cpe:2.3:a:microsoft:outlook:3.30.0
Microsoft » Outlook » Version: 3.31.0

cpe:2.3:a:microsoft:outlook:3.31.0
Microsoft » Outlook » Version: 3.32.0

cpe:2.3:a:microsoft:outlook:3.32.0
Microsoft » Outlook » Version: 3.33.0

cpe:2.3:a:microsoft:outlook:3.33.0
Microsoft » Outlook » Version: 97

cpe:2.3:a:microsoft:outlook:97
Microsoft » Outlook » Version: 98

cpe:2.3:a:microsoft:outlook:98
Microsoft » Outlook » Version: xp

cpe:2.3:a:microsoft:outlook:xp
Microsoft » Outlook Express » Version: N/A

cpe:2.3:a:microsoft:outlook_express:-
Microsoft » Outlook Express » Version: 4.0

cpe:2.3:a:microsoft:outlook_express:4.0
Microsoft » Outlook Express » Version: 4.01

cpe:2.3:a:microsoft:outlook_express:4.01
Microsoft » Outlook Express » Version: 4.5

cpe:2.3:a:microsoft:outlook_express:4.5
Microsoft » Outlook Express » Version: 4.72.2106.4

cpe:2.3:a:microsoft:outlook_express:4.72.2106.4
Microsoft » Outlook Express » Version: 4.72.3120.0

cpe:2.3:a:microsoft:outlook_express:4.72.3120.0
Microsoft » Outlook Express » Version: 4.72.3612.1700

cpe:2.3:a:microsoft:outlook_express:4.72.3612.1700
Microsoft » Outlook Express » Version: 5.0

cpe:2.3:a:microsoft:outlook_express:5.0
Microsoft » Outlook Express » Version: 5.0.1

cpe:2.3:a:microsoft:outlook_express:5.0.1
Microsoft » Outlook Express » Version: 5.0.2

cpe:2.3:a:microsoft:outlook_express:5.0.2
Microsoft » Outlook Express » Version: 5.0.3

cpe:2.3:a:microsoft:outlook_express:5.0.3
Microsoft » Outlook Express » Version: 5.01

cpe:2.3:a:microsoft:outlook_express:5.01
Microsoft » Outlook Express » Version: 5.02

cpe:2.3:a:microsoft:outlook_express:5.02
Microsoft » Outlook Express » Version: 5.5

cpe:2.3:a:microsoft:outlook_express:5.5
Microsoft » Outlook Express » Version: 6.0

cpe:2.3:a:microsoft:outlook_express:6.0
Microsoft » Outlook Express » Version: 6.00.2800.1106

cpe:2.3:a:microsoft:outlook_express:6.00.2800.1106
Microsoft » Outlook Express » Version: 6.00.2900.2180

cpe:2.3:a:microsoft:outlook_express:6.00.2900.2180
Microsoft » Outlook Express » Version: 6.00.2900.5512

cpe:2.3:a:microsoft:outlook_express:6.00.2900.5512
Microsoft » Outlook Express » Version: 7.0

cpe:2.3:a:microsoft:outlook_express:7.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-4040

Products

Pricing

Contact Us