CVE-2007-2227: Medium severity Microsoft Windows 2003 Server vulnerability
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2227?
CVE-2007-2227 is considered a high severity vulnerability due to its potential for information disclosure from cross-domain attacks.
How does CVE-2007-2227 affect Microsoft products?
CVE-2007-2227 affects Microsoft Outlook Express 6 and Windows Mail in Windows Vista, allowing unauthorized access to sensitive information.
How do I fix CVE-2007-2227?
To fix CVE-2007-2227, users should ensure they have installed security updates provided by Microsoft for Outlook Express and Windows Mail.
What type of attack does CVE-2007-2227 demonstrate?
CVE-2007-2227 demonstrates a cross-domain attack that exploits improper handling of Content-Disposition notifications.
Are all versions of Microsoft Outlook Express vulnerable to CVE-2007-2227?
Only Microsoft Outlook Express 6 is specifically mentioned as vulnerable to CVE-2007-2227, while other software versions are not affected.