vulnwire
4.3med

CVE-2007-14991 exploit

Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary…

Published 19 y ago · modified 4 mo ago · JSON

CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
30.0%
percentile 98%
Public exploits
1
Exploit-DB

Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navigation Canceled" page and injects the script into the "Refresh the page" link, aka Navigation Cancel Page Spoofing Vulnerability."

Exploit prediction (EPSS)

29.97% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.

Exploits and detections

  • EDB-29741 Microsoft Internet Explorer 7 - NavCancel.HTM Cross-Site Scripting · remote · 2007-03-14

CVSS scores

Assigned byVersionScoreVector
NVD2.04.3AV:N/AC:M/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation

References

  • securityfocus.com /bid/22966 · vdb-entry, x_refsource_BID, x_transferred
  • securityreason.com /securityalert/2448 · third-party-advisory, x_refsource_SREASON, x_transferred
  • osvdb.org /35352 · vdb-entry, x_refsource_OSVDB, x_transferred
  • vupen.com /english/advisories/2007/0946 · vdb-entry, x_refsource_VUPEN, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1715 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • secunia.com /advisories/25627 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • aviv.raffon.net /2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/471947/100/0/threaded · vendor-advisory, x_refsource_HP, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/33026 · vdb-entry, x_refsource_XF, x_transferred
  • securitytracker.com /id?1018235 · vdb-entry, x_refsource_SECTRACK, x_transferred
  • secunia.com /advisories/24535 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • vupen.com /english/advisories/2007/2153 · vdb-entry, x_refsource_VUPEN, x_transferred
  • us-cert.gov /cas/techalerts/TA07-163A.html · third-party-advisory, x_refsource_CERT, x_transferred
  • news.com.com /2100-1002_3-6167410.html · x_refsource_MISC, x_transferred
  • securityfocus.com /archive/1/462939/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /archive/1/462945/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2007/ms07-033 · vendor-advisory, x_refsource_MS, x_transferred
  • securityfocus.com /archive/1/462833/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.