alpine · CVE-2007-4040

Quick triage

Priority: not assigned 公開: Updated:

参照: Official alpine advisory, NVD, CVE.org · CVE 詳細

Freshness: no update timestamp found; verify against the upstream OS advisory manually.

Tracker summary

CVE-2007-4040: no source package rows; 0 state rows across 0 repos (none); fixed 0, open 0.

Description:

Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670.

cvelogic Threat Intelligence