Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2007-3201

EPSS 6.11% · P91
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2007-3201

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
WindowsPT用户ID密钥欺骗漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Windows Privacy Tray是GnuPG的图形任务栏前端，集成了密钥管理和文件、剪贴板加密功能。 WinPT在显示密钥时存在问题，攻击者可能利用此漏洞欺骗用户ID。 在某些情况下密钥用户ID是在固定大小的窗口中显示的，如果密钥的用户ID中使用了大量的数据，就会截短显示多余的用户ID数据。这允许攻击者诱骗用户在某些操作中(包括密钥导入、签名、编辑、列出签名等)使用隐藏了额外用户ID的密钥，导致以攻击者的密钥而不是合法的密钥非预期地加密敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2007-3201

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2007-3201

请登录查看更多情报信息。

Same Patch Batch · n/a · 2007-06-12 · 37 CVEs total

CVE-2007-3195ERFAN WIKI Index.PHP 跨站脚本攻击漏洞
CVE-2007-3181Firebird SQL fbserver connect请求远程缓冲区溢出漏洞
CVE-2007-3188GeometriX Download Portal Down_Indir.ASP SQL注入漏洞
CVE-2007-3189Just For Fun 网络管理和检测系统 跨站脚本攻击漏洞
CVE-2007-3190Just For Fun 网络管理和检测系统 多个远程漏洞
CVE-2007-3191Just For Fun 网络管理和检测系统 多个远程漏洞
CVE-2007-3192Just For Fun Network Management System修改配置漏洞
CVE-2007-3193PhpWiki　lib/WikiUser/LDAP.php　绕过身份认证漏洞
CVE-2007-3194myBloggie PHP远程文件包含漏洞
CVE-2007-3187Windows Apple Safari　远程拒绝服务攻击漏洞
CVE-2007-3196vBSupport Integrated Ticket System vBSupport.PHP SQL注入漏洞
CVE-2007-3197vBSupport SQL注入漏洞
CVE-2007-3198Maran Blog Comments.PHP 跨站脚本攻击漏洞
CVE-2007-3199Link Request Contact Form任意文件上传漏洞
CVE-2007-3200Novell NetWare Modular Authentication Service 本地信息泄露漏洞
CVE-2007-3202WebWiz Rich Text Editor Topics Page HTML注入漏洞
CVE-2007-3203602Pro Lan Suite 2003邮件消息远程栈溢出漏洞
CVE-2007-3204Just For Fun Network Management System (JFFNMS) SQL注入漏洞
CVE-2007-2229Microsoft Vista不安全存储用户信息漏洞(MS07-032)
CVE-2007-2796Arris Cadant C3 CTMS畸形IP报文远程拒绝服务漏洞

Showing top 20 of 37 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2007-3201

No comments yet

Leave a comment