CVE-2007-3033

Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote…

published August 14, 2007

CVSS

—

EPSS

28%

Percentile

98.1

In the wild

Unconfirmed

What it is

Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.28367 · 98.1th percentile
Published: 2007-08-14T22:00Z

EPSS history

Timeline

14 AUG 22:00Z
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote…
cvelistv5