CVE-2007-3896 The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%"....
HighCVSS 9.3
EPSS 53.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe Reader, Skype, and other applications. NOTE: this issue might be related to other issues involving URL handlers in Windows systems, such as CVE-2007-3845. There also might be separate but closely related issues in the applications that are invoked by the handlers.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 7.0 | No fix listed |
References
- blogs.zdnet.com
- 20071003 0day: mIRC pwns Windows mailing-list
- 20071003 Re: 0day: mIRC pwns Windows mailing-list
- 20071005 URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071009 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071007 Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071005 URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071007 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071007 Re: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 26201 third-party-advisory vendor-advisory
- 1018831 vdb-entry
- www.heise-security.co.uk
- VU#403150 third-party-advisory us-government-resource
- 943521 vendor-advisory
- 20071004 Re[2]: 0day: mIRC pwns Windows mailing-list
- 20071004 Re: 0day: mIRC pwns Windows mailing-list
- 20071005 RE: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re[2]: URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071006 Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype mailing-list
- 20071007 Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071007 Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype mailing-list
- 20071008 Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype mailing-list
- 20071009 RE: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071007 Re: Re[2]: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape,Miranda, Skype mailing-list
- 20071008 Re: [Full-disclosure] URI handling woes in Acrobat Reader, Netscape, Miranda, Skype mailing-list
- 20071011 M$ will fix URI? mailing-list
- 20071014 Third-party patch for CVE-2007-3896 (Internet Explorer 7 invalid URI handling) available mailing-list
- 20071017 Re: Third-party patch for CVE-2007-3896, UPDATE NOW mailing-list
- HPSBST02291 vendor-advisory
- 25945 vdb-entry
- 1018822 vdb-entry
- TA07-317A third-party-advisory us-government-resource
- xs-sniper.com
- MS07-061 vendor-advisory
- oval:org.mitre.oval:def:4581 signature vdb-entry