Microsoft Windows URI protocol handling vulnerability

🗓️ 27 Jul 2007 00:00:00Reported by Billy RiosType

Microsoft Windows URI protocol handling vulnerability allows remote attackers to execute arbitrary commands by manipulating URIs. Mitigated by Microsoft Security Bulletin MS07-061 update

Reporter	Title	Published	Views	Family All 20
Circl	CVE-2007-3896	31 Aug 202503:01	–	circl
Check Point Advisories	Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061; CVE-2007-3896)	31 Oct 200700:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows ShellExecute and IE7 URL Handling Code Execution (MS07-061) - Ver2 (CVE-2007-3896)	16 Apr 201400:00	–	checkpoint_advisories
CVE	CVE-2007-3896	11 Oct 200700:00	–	cve
Cvelist	CVE-2007-3896	11 Oct 200700:00	–	cvelist
canvas	Immunity Canvas: IE7WMP	10 Oct 200720:17	–	canvas
canvas	Immunity Canvas: IEPDF	10 Oct 200720:17	–	canvas
NVD	CVE-2007-3896	11 Oct 200700:17	–	nvd
OpenVAS	Adobe Reader URI Handler Remote Code Execution Vulnerabilities (Oct 2007) - Windows	10 Apr 201400:00	–	openvas
Prion	Design/Logic Flaw	11 Oct 200700:17	–	prion

Source	Link
microsoft	www.microsoft.com/technet/security/bulletin/ms07-061.mspx
microsoft	www.microsoft.com/technet/security/advisory/943521.mspx
blogs	www.blogs.technet.com/msrc/archive/2007/10/25/msrc-blog-october-25th-update-to-security-advisory-943521.aspx
xs-sniper	www.xs-sniper.com/blog/2007/07/24/remote-command-execution-in-firefox-2005/
xs-sniper	www.xs-sniper.com/blog/remote-command-exec-firefox-2005/
adobe	www.adobe.com/support/security/advisories/apsa07-04.html
adobe	www.adobe.com/support/security/bulletins/apsb07-18.html
secunia	www.secunia.com/advisories/26201/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
support	www.support.microsoft.com/kb/224816

13 Nov 2007 21:21Current

6.8Medium risk

Vulners AI Score6.8

CVSS 29.3

EPSS0.83622