Vulnerability Description
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Exchange Server | 2000 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/25183Third Party Advisory
- http://www.kb.cert.org/vuls/id/124113Third Party AdvisoryUS Government Resource
- http://www.osvdb.org/34389Broken Link
- http://www.securityfocus.com/archive/1/468871/100/200/threadedThird Party AdvisoryVDB Entry
- http://www.securityfocus.com/bid/23806Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1018015Third Party AdvisoryVDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-128A.htmlThird Party AdvisoryUS Government Resource
- http://www.vupen.com/english/advisories/2007/1711Permissions Required
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-02Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33887Third Party AdvisoryVDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
- http://secunia.com/advisories/25183Third Party Advisory
- http://www.kb.cert.org/vuls/id/124113Third Party AdvisoryUS Government Resource
- http://www.osvdb.org/34389Broken Link
- http://www.securityfocus.com/archive/1/468871/100/200/threadedThird Party AdvisoryVDB Entry
FAQ
What is CVE-2007-0220?
CVE-2007-0220 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or...
How severe is CVE-2007-0220?
CVE-2007-0220 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-0220?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Exchange Server.