Design/Logic Flaw

Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HTML attributes...

CVE-2007-3891

Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HTML attributes...

CVE-2007-3891

Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HTML attributes...

CVE-2007-3891

CVE-2007-3891 describes a remote code execution in the Windows Vista Weather Gadget (Weather Gadget on Windows Vista). The vulnerability arises because the gadget does not properly validate HTML attributes, enabling an attacker to run code with the privileges of the logged-on user. Microsoft addr...