CVE-2007-3164 describes a phishing vulnerability in Microsoft Internet Explorer 7 related to how it displays Internationalized Domain Names (IDNs) during HTTP Basic Authentication. When prompting for credentials, the browser would display the IDN in its internationalized form within the authentication dialog, while the status bar showed the Punycode (ACE) label. This discrepancy could allow remote attackers to conduct phishing attacks by using confusable characters in the internationalized domain name, potentially tricking users into providing credentials to malicious sites. The vulnerability has a CVSS score of 5.8 (Medium), indicating a network-based attack with medium complexity, requiring no authentication, and potentially leading to partial confidentiality and integrity impacts. Its FAUCET Risk Score is 82/100, suggesting a notable risk despite its age. There is no evidence of active exploitation, nor are there known Metasploit modules, Nuclei templates, or ExploitDB entries for this vulnerability. Community discussion and media coverage are minimal, consistent with the majority of CVEs.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.0CPE matchmatch criteria | cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.