CVE-2007-3201 Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a vi...
HighCVSS 7.1
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| winpt | = 1.2.0 | No fix listed |
References
- 41727 vdb-entry
- 2791 third-party-advisory
- wald.intevation.org
- 20070611 WinPT User ID Spoofing Vulnerability mailing-list
- 24412 exploit vdb-entry
- winpt-userid-key-spoofing(34813) vdb-entry