CVE-2007-2225

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs…

published June 12, 2007

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25040 · 97.9th percentile
Published
2007-06-12T20:00Z
EPSS history
Timeline
  • 12 JUN 20:00Z
    A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs…
    cvelistv5