Unrated severityNVD Advisory· Published Jun 12, 2007· Updated Jun 16, 2026
CVE-2007-2225
CVE-2007-2225
Description
A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*
- (no CPE)range: = 6.0
cpe:2.3:a:microsoft:windows_mail:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:microsoft:windows_mail:*:*:*:*:*:*:*:*
- (no CPE)range: = Windows Vista
Patches
Vulnerability mechanics
References
14- www.kb.cert.org/vuls/id/682825nvdUS Government Resource
- www.us-cert.gov/cas/techalerts/TA07-163A.htmlnvdUS Government Resource
- archive.openmya.devnull.jp/2007.06/msg00060.htmlnvd
- openmya.hacker.jp/hasegawa/security/ms07-034.txtnvd
- osvdb.org/35345nvd
- secunia.com/advisories/25639nvd
- www.securityfocus.com/archive/1/471947/100/0/threadednvd
- www.securityfocus.com/archive/1/472002/100/0/threadednvd
- www.securityfocus.com/bid/24392nvd
- www.securitytracker.com/idnvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2007/2154nvd
- docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2045nvd
News mentions
0No linked articles in our index yet.