CVEvulnerability
CVE-2007-0220
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-05-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remote attackers to execute arbitrary scripts, spoof content, or obtain sensitive information via certain UTF-encoded, script-based e-mail attachments, involving an "incorrectly handled UTF character set label".
Affected configurations
• microsoft exchange server 2000
• microsoft exchange server 2003
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://secunia.com/advisories/25183 Third Party Advisory
- http://www.kb.cert.org/vuls/id/124113 Third Party Advisory, US Government Resource
- http://www.osvdb.org/34389 Broken Link
- http://www.securityfocus.com/archive/1/468871/100/200/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/23806 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018015 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/1711 Permissions Required
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33887 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1371 Third Party Advisory
- http://secunia.com/advisories/25183 Third Party Advisory
- http://www.kb.cert.org/vuls/id/124113 Third Party Advisory, US Government Resource
- http://www.osvdb.org/34389 Broken Link
- http://www.securityfocus.com/archive/1/468871/100/200/threaded Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/23806 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018015 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2007/1711 Permissions Required
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33887 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1371 Third Party Advisory