CVE-2007-3201

Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID.

CVSS v2.0

7.1 HIGHAV:N/AC:M/Au:N/C:N/I:C/A:N

EPSS

2.71% chance of exploitation in the next 30 days, 85th percentile

Published

2007-06-12

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30169

References

• CVE Record
• NVD entry

Related

• CVE-2007-3199
• CVE-2007-3212
• CVE-2007-3198
• CVE-2007-3214
• CVE-2007-3196
• CVE-2007-3216