Read the docs
TI-2007-02145 Aliases CVE-2007-2227GHSA-fpr8-hq4f-4x67

The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows…

Priority MEDIUM 41Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."

Why it matters now

EPSS 0.2504 97th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 12

CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*sp1Running onMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*sp1Running onMicrosoft
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*sp2Running onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*6.0VulnerableMicrosoft
cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*all versionsRunning onMicrosoft
  • cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:* Versions sp1 Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:* Versions sp1 Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:* Versions sp2 Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Microsoft
  • cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:* Versions all versions Running on ·Microsoft
Show 2 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*all versionsRunning onMicrosoft
cpe:2.3:a:microsoft:windows_mail:*:*:*:*:*:*:*:*all versionsVulnerableMicrosoft
  • cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:* Versions all versions Running on ·Microsoft
  • cpe:2.3:a:microsoft:windows_mail:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-2227
  2. 2026-10-03 Alias added: GHSA-fpr8-hq4f-4x67

References

Advisory 2

Other 5

  • TI-2004-00347 The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6… CVSS 2.0HIGH 10.0
  • TI-2007-03777 Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail… CVSS 2.0HIGH 9.3
  • TI-2005-01149 Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL)… CVSS 2.0HIGH 7.5
  • TI-2010-00777 Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1… CVSS 2.0HIGH 9.3
  • TI-2010-03008 Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in… CVSS 2.0HIGH 9.3
  • TI-2007-03910 Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when… CVSS 3.1HIGH 8.8
See all 44 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences