CVE-2007-4040

2007-07-2722:30:00

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

7.3

Confidence

Low

EPSS

0.572

Percentile

97.7%

JSON

Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

Affected configurations

Nvd

Node

microsoftoutlook

microsoftoutlook_express

VendorProductVersionCPE
microsoftoutlook*cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:*
microsoftoutlook_express*cpe:2.3:a:microsoft:outlook_express:*:*:*:*:*:*:*:*