Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-3091

30
FAUCET Score

CVE-2007-3091 describes a race condition in Microsoft Internet Explorer 6 and 7 across various Windows operating systems, including XP, Server 2003, Vista, and Server 2008. This vulnerability, also known as the "bait & switch vulnerability," allows remote attackers to execute arbitrary code or perform actions with the permissions of a previous page but the content of a new page during a page transition. With a CVSS score of 7.1, it is considered highly severe due to its network attack vector and potential for complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
sp1CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*
sp1CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*
sp1CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:sp1:*:x64:*:*:*:*:*
sp2CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*
sp2CPE matchmatch criteria
cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

7.1HIGH

AV:N/AC:M/Au:N/C:N/I:N/A:C

Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.9
CvssVersion
2.0

Exploit Intelligence

EPSS Score
27.75%
Probability of exploitation in next 30 days
EPSS Percentile
97.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.2775 is in the 92nd percentile among its peer group of 8,920 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Remediation records are not available for this CVE.

References

archives.neohapsis.com / archives/fulldisclosure/2007-06/0026.html
lcamtuf.coredump.cx / ierace
osvdb.org / 38497
osvdb.org / 54944
docs.microsoft.com / en-us/security-updates/securitybulletins/2009/ms09-019
secunia.com / advisories/25564
Vendor Advisory
securityreason.com / securityalert/2781
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/34696
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6041
kb.cert.org / vuls/id/471361
US Government Resource
securityfocus.com / archive/1/470446/100/0/threaded
securityfocus.com / bid/24283
Patch
us-cert.gov / cas/techalerts/TA09-160A.html
US Government Resource
vupen.com / english/advisories/2007/2064
Vendor Advisory
vupen.com / english/advisories/2009/1538
PatchVendor Advisory