Back to search
CVE-2007-0220
Published: May 8, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
HPSBST02214
vendor-advisory
x_refsource_HP
1018015
vdb-entry
x_refsource_SECTRACK
MS07-026
vendor-advisory
x_refsource_MS
SSRT071422
vendor-advisory
x_refsource_HP
VU#124113
third-party-advisory
x_refsource_CERT-VN
23806
vdb-entry
x_refsource_BID
25183
third-party-advisory
x_refsource_SECUNIA
TA07-128A
third-party-advisory
x_refsource_CERT
ADV-2007-1711
vdb-entry
x_refsource_VUPEN
oval:org.mitre.oval:def:1371
vdb-entry
signature
x_refsource_OVAL
exchange-utf-xss(33887)
vdb-entry
x_refsource_XF
34389
vdb-entry
x_refsource_OSVDB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now