CVE-2007-3091 describes a race condition in Microsoft Internet Explorer 6 and 7 across various Windows operating systems, including XP, Server 2003, Vista, and Server 2008. This vulnerability, also known as the "bait & switch vulnerability," allows remote attackers to execute arbitrary code or perform actions with the permissions of a previous page but the content of a new page during a page transition. With a CVSS score of 7.1, it is considered highly severe due to its network attack vector and potential for complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
sp1CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:* | ||
sp1CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:* | ||
sp1CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:sp1:*:x64:*:*:*:*:* | ||
sp2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:* | ||
sp2CPE matchmatch criteria | cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:N/I:N/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.