CVE-2007-2227

CVE-2007-2227 · MEDIUM Severity

AV:N/AC:M/AU:N/C:P/I:N/A:N

The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."

Learn more about our Web Application Penetration Testing UK.