CVE-2007-4356 Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading t...
HighCVSS 9.3
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-dependent attackers to obtain sensitive information by reading the HTML source, as demonstrated by a (1) .htm, (2) .html, or (3) .mht file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
References
- blog.washingtonpost.com
- 36400 vdb-entry
- 26427 third-party-advisory vendor-advisory