CVE-2007-3892
Estado: ModificadaAlta (7.5)—
Microsoft Internet Explorer 5.01 hasta 7 permite a atacantes remotos falsificar la barra de direcciones URL y otras "Interfaces de Usuario de confianza" mediante vectores no especificados, un asunto diferente que CVE-2007-1091 y CVE-2007-3826.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 26%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 9/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-94
Referencias
- http://secunia.com/advisories/27133
- http://securitytracker.com/id?1018788
- http://www.securityfocus.com/archive/1/482366/100/0/threaded
- http://www.securityfocus.com/bid/25915
- http://www.us-cert.gov/cas/techalerts/TA07-282A.html
- http://www.vupen.com/english/advisories/2007/3437
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2244
- http://secunia.com/advisories/27133
- http://securitytracker.com/id?1018788
- http://www.securityfocus.com/archive/1/482366/100/0/threaded
- http://www.securityfocus.com/bid/25915
- http://www.us-cert.gov/cas/techalerts/TA07-282A.html
- http://www.vupen.com/english/advisories/2007/3437
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2244
JSON original (NVD)
Mostrar
{
"id": "CVE-2007-3892",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "secure@microsoft.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2007-10-09T22:17:00.000",
"references": [
{
"url": "http://secunia.com/advisories/27133",
"source": "secure@microsoft.com"
},
{
"url": "http://securitytracker.com/id?1018788",
"source": "secure@microsoft.com"
},
{
"url": "http://www.securityfocus.com/archive/1/482366/100/0/threaded",
"source": "secure@microsoft.com"
},
{
"url": "http://www.securityfocus.com/bid/25915",
"source": "secure@microsoft.com"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA07-282A.html",
"tags": [
"US Government Resource"
],
"source": "secure@microsoft.com"
},
{
"url": "http://www.vupen.com/english/advisories/2007/3437",
"source": "secure@microsoft.com"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057",
"source": "secure@microsoft.com"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2244",
"source": "secure@microsoft.com"
},
{
"url": "http://secunia.com/advisories/27133",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1018788",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/archive/1/482366/100/0/threaded",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/25915",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.us-cert.gov/cas/techalerts/TA07-282A.html",
"tags": [
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2007/3437",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2244",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other \"trust UI\" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826."
},
{
"lang": "es",
"value": "Microsoft Internet Explorer 5.01 hasta 7 permite a atacantes remotos falsificar la barra de direcciones URL y otras \"Interfaces de Usuario de confianza\" mediante vectores no especificados, un asunto diferente que CVE-2007-1091 y CVE-2007-3826."
}
],
"lastModified": "2026-06-16T22:42:58.987",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2516.1900:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E215C82-E4AD-4B87-92D8-DD4D486EB6EF"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2614.3500:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D91F4C80-3B1B-45BD-966F-C9DBF98B875D"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F65E0DC1-40F6-4252-945A-A972343D1E29"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.3800:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C07C1A9-1A94-4653-8C57-6FCFC25854E4"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2919.6307:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDC57519-AD96-4ECF-A5B2-4E45F7D55298"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.2920.0000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37DE3DE6-A355-41F2-BF5E-E7526449E753"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3103.1000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5DB24B4F-44FF-4F0F-90FA-240A34B9599F"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3105.0106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "919A6551-DB18-49BD-AB92-4C453B3B728F"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3314.2101:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C512DAB3-2720-42D2-B27E-28F30FE0FE46"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3315.1000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB90458F-1F2B-4F4C-88C6-4B670787D126"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3502.1000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6C2EFDB4-97C2-4DDF-8A65-FCFB60FCB540"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.00.3700.1000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A99CDC7-9341-4DFB-BB18-FF06C05FF9B0"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2462.0000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "314538E8-48EC-4869-9074-2A1F5B7CBB3C"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2479.0006:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F56B3A72-7C5E-4F0C-BBC7-AA13DDFBEE70"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2600.0000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6876CE89-AA70-44C5-8A69-E2ED7A63F570"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2800.1106:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCE2555F-C4BE-482F-8DD9-976D2026058C"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.2900.2180:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61F352FE-C22E-4B33-A46F-77A164B5DABB"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3663.0000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5ACD5A44-0926-4A1B-9900-1E7CC0A561C8"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3718.0000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "196CEE37-2E3A-41A7-9AC1-0D5CC3F35D8F"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.0000:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3E16BEF4-71AA-4E23-B438-D25FFABDB646"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.1830:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1F32702E-F955-4DDB-B235-7C47E882453C"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.00.3790.3959:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FA2B4AD-C04D-4A6B-8570-5A2F5489F750"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED471260-0272-431F-A91E-AC2883D92497"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63D18070-EC48-4904-9AE0-558F7F3B869D"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86584E3F-3B0D-4018-A186-E59F3B01CA5C"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.00.5730.1100:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "37F63AE1-8FC9-4C0F-8D19-F17DFA214E94"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16386:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35B1186A-FA5B-4E49-8C2F-BCD2D45F22A2"
},
{
"criteria": "cpe:2.3:a:microsoft:internet_explorer:7.00.6000.16441:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "53D75496-8594-44DB-B5C4-EA3CABD6551A"
}
],
"operator": "OR"
}
]
}
],
"evaluatorComment": "Secunia advisory: http://secunia.com/advisories/23469/ \r\nContains patch information.",
"sourceIdentifier": "secure@microsoft.com"
}