Lucene search

K
cveMitreCVE-2007-3109
HistoryJun 07, 2007 - 9:30 p.m.

CVE-2007-3109

2007-06-0721:30:00
mitre
web.nvd.nist.gov
28
cve-2007-3109
cern image map dispatcher
microsoft frontpage
vulnerability
remote attack
file access
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.012

Percentile

85.5%

The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial contents, of arbitrary files under the web root via a relative pathname in the PATH_INFO.

Affected configurations

Nvd
Node
microsoftfrontpage
OR
microsoftoffice
VendorProductVersionCPE
microsoftfrontpage*cpe:2.3:a:microsoft:frontpage:*:*:*:*:*:*:*:*
microsoftoffice*cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.7

Confidence

Low

EPSS

0.012

Percentile

85.5%

Related for CVE-2007-3109