CVE-2007-3892

Severity CVSS v4.0:

Pending analysis

Type:

CWE-94 Code Injection

Publication date:

09/10/2007

Last modified:

09/04/2025

Description

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:P/I:P/A:P CVSS v2.0 Severity and Metrics:

Base Score: 7.50 HIGH
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): Physical
Integrity (I): Physical
Availability (A): Physical

Base Score 2.0

7.50

Severity 2.0

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:::::::*
cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:::::::*
cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:::::::*
cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:::::::*
cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:::::::*
cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000:::::::*

CVE-2007-3892

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools