#VU1240 OS command injection in Windows and Windows Server - CVE-2007-3896

Description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to insufficient filtration of URIs in Shell32.dll when open applications via URL handlers (e.g. mailto:). A remote attacker can create a specially crafted URI, containing invalid sequence of % characters, trick the victim to click on it and execute arbitrary system commands with privileges of the current user.

Successful exploitation of the vulnerability results in compromise of vulnerable system.

Note: this vulnerability is being actively exploited.

Remediation

External links

• https://technet.microsoft.com/library/security/943521
• https://technet.microsoft.com/en-us/library/security/ms07-061.aspx