cvelistv5 - cve-2007-0217

CVE-2007-0217 (GCVE-0-2007-0217)

Vulnerability from cvelistv5

Published

2007-02-13 22:00

Modified

2024-08-07 12:12

Severity ?

CWE

Summary

The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption.

References

URL

Tags

	http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473	third-party-advisory, x_refsource_IDEFENSE
	http://www.osvdb.org/31892	vdb-entry, x_refsource_OSVDB
	http://www.securityfocus.com/bid/22489	vdb-entry, x_refsource_BID
	http://www.kb.cert.org/vuls/id/613564	third-party-advisory, x_refsource_CERT-VN
	http://www.us-cert.gov/cas/techalerts/TA07-044A.html	third-party-advisory, x_refsource_CERT
	http://www.securitytracker.com/id?1017642	vdb-entry, x_refsource_SECTRACK
	http://www.vupen.com/english/advisories/2007/0584	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/24156	third-party-advisory, x_refsource_SECUNIA
	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016	vendor-advisory, x_refsource_MS
	http://www.securityfocus.com/archive/1/462303/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1141	vdb-entry, signature, x_refsource_OVAL

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:12:17.309Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20070213 Microsoft \u0027wininet.dll\u0027 FTP Reply Null Termination Heap Corruption Vulnerability",
            "tags": [
              "third-party-advisory",
              "x_refsource_IDEFENSE",
              "x_transferred"
            ],
            "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473"
          },
          {
            "name": "31892",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/31892"
          },
          {
            "name": "22489",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/22489"
          },
          {
            "name": "VU#613564",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/613564"
          },
          {
            "name": "TA07-044A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
          },
          {
            "name": "1017642",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1017642"
          },
          {
            "name": "ADV-2007-0584",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/0584"
          },
          {
            "name": "24156",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/24156"
          },
          {
            "name": "MS07-016",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016"
          },
          {
            "name": "20070309 MS07-016 FTP Response DOS PoC",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/462303/100/0/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:1141",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1141"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-02-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "20070213 Microsoft \u0027wininet.dll\u0027 FTP Reply Null Termination Heap Corruption Vulnerability",
          "tags": [
            "third-party-advisory",
            "x_refsource_IDEFENSE"
          ],
          "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473"
        },
        {
          "name": "31892",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/31892"
        },
        {
          "name": "22489",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/22489"
        },
        {
          "name": "VU#613564",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/613564"
        },
        {
          "name": "TA07-044A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
        },
        {
          "name": "1017642",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1017642"
        },
        {
          "name": "ADV-2007-0584",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/0584"
        },
        {
          "name": "24156",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/24156"
        },
        {
          "name": "MS07-016",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016"
        },
        {
          "name": "20070309 MS07-016 FTP Response DOS PoC",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/462303/100/0/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:1141",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1141"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2007-0217",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20070213 Microsoft \u0027wininet.dll\u0027 FTP Reply Null Termination Heap Corruption Vulnerability",
              "refsource": "IDEFENSE",
              "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=473"
            },
            {
              "name": "31892",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/31892"
            },
            {
              "name": "22489",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/22489"
            },
            {
              "name": "VU#613564",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/613564"
            },
            {
              "name": "TA07-044A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA07-044A.html"
            },
            {
              "name": "1017642",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1017642"
            },
            {
              "name": "ADV-2007-0584",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/0584"
            },
            {
              "name": "24156",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/24156"
            },
            {
              "name": "MS07-016",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016"
            },
            {
              "name": "20070309 MS07-016 FTP Response DOS PoC",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/462303/100/0/threaded"
            },
            {
              "name": "oval:org.mitre.oval:def:1141",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1141"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2007-0217",
    "datePublished": "2007-02-13T22:00:00.000Z",
    "dateReserved": "2007-01-12T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:12:17.309Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2007-AVI-084

Vulnerability from certfr_avis

De multiples vulnérabilités permettant l'exécution de code arbitraire à distance ont été découvertes dans la majorité des versions d'Internet Explorer.

Description

Trois vulnérabilités ont été découvertes dans la majorité des versions d'Internet Explorer :

les deux premières vulnérabilités résultent d'un mauvais traitement des objets COM et permettent, via une page web spécialement conçue, d'exécuter du code arbitraire à distance ;
la dernière résulte d'une mauvaise interprétation par la bibliothèque wininet.dll de certaines réponses FTP. L'exploitation de cette vulnérabilité permet d'obtenir un accès au système avec les droits de l'utilisateur local.

Ces vulnérabilités ne semblent pas toucher la version d'Internet Explorer 7 disponible sous Windows Vista.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Microsoft	N/A	Microsoft Internet Explorer 5.01 ;
Microsoft	Windows	Microsoft Internet Explorer 7 sous Windows Vista n'est pas affecté.
Microsoft	N/A	Microsoft Internet Explorer 7 ;
Microsoft	N/A	Microsoft Internet Explorer 6 ;

References

Title

Publication Time

Tags

Bulletin de sécurité MS07-016 de Microsoft du 13 février 2007	None	vendor-advisory
Bulletin de sécurité Microsoft MS07-016 du 13 février 2007 :	-	other
Bulletin de sécurité Microsoft MS07-016 du 13 février 2007 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Microsoft Internet Explorer 5.01 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Internet Explorer 7 sous Windows Vista n\u0027est pas affect\u00e9.",
      "product": {
        "name": "Windows",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Internet Explorer 7 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    },
    {
      "description": "Microsoft Internet Explorer 6 ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Microsoft",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nTrois vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans la majorit\u00e9 des versions\nd\u0027Internet Explorer :\n\n-   les deux premi\u00e8res vuln\u00e9rabilit\u00e9s r\u00e9sultent d\u0027un mauvais traitement\n    des objets COM et permettent, via une page web sp\u00e9cialement con\u00e7ue,\n    d\u0027ex\u00e9cuter du code arbitraire \u00e0 distance ;\n-   la derni\u00e8re r\u00e9sulte d\u0027une mauvaise interpr\u00e9tation par la\n    biblioth\u00e8que wininet.dll de certaines r\u00e9ponses FTP. L\u0027exploitation\n    de cette vuln\u00e9rabilit\u00e9 permet d\u0027obtenir un acc\u00e8s au syst\u00e8me avec les\n    droits de l\u0027utilisateur local.\n\nCes vuln\u00e9rabilit\u00e9s ne semblent pas toucher la version d\u0027Internet\nExplorer 7 disponible sous Windows Vista.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2007-0217",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0217"
    },
    {
      "name": "CVE-2007-0219",
      "url": "https://www.cve.org/CVERecord?id=CVE-2007-0219"
    },
    {
      "name": "CVE-2006-4697",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-4697"
    }
  ],
  "initial_release_date": "2007-02-14T00:00:00",
  "last_revision_date": "2007-02-14T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-016 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/france/technet/security/bulletin/MS07-016.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS07-016 du 13 f\u00e9vrier 2007    :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS07-016.mspx"
    }
  ],
  "reference": "CERTA-2007-AVI-084",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2007-02-14T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s permettant l\u0027ex\u00e9cution de code arbitraire \u00e0\ndistance ont \u00e9t\u00e9 d\u00e9couvertes dans la majorit\u00e9 des versions d\u0027Internet\nExplorer.\n",
  "title": "Multiples vuln\u00e9rabilit\u00e9s du navigateur Internet Explorer de Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 MS07-016 de Microsoft du 13 f\u00e9vrier 2007",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2007-0217 (GCVE-0-2007-0217)

Vulnerability from cvelistv5

CERTA-2007-AVI-084

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature