{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-03-09T00:00:00", "descriptions": [{"lang": "en", "value": "Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "winpt-userid-key-spoofing(34813)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34813"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138"}, {"name": "2791", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2791"}, {"name": "20070611 WinPT User ID Spoofing Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/471045/100/0/threaded"}, {"name": "41727", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/41727"}, {"name": "24412", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24412"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-3201", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "winpt-userid-key-spoofing(34813)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34813"}, {"name": "http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138", "refsource": "CONFIRM", "url": "http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138"}, {"name": "2791", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2791"}, {"name": "20070611 WinPT User ID Spoofing Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/471045/100/0/threaded"}, {"name": "41727", "refsource": "OSVDB", "url": "http://osvdb.org/41727"}, {"name": "24412", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24412"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:05:29.289Z"}, "title": "CVE Program Container", "references": [{"name": "winpt-userid-key-spoofing(34813)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34813"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138"}, {"name": "2791", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2791"}, {"name": "20070611 WinPT User ID Spoofing Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/471045/100/0/threaded"}, {"name": "41727", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/41727"}, {"name": "24412", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24412"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3201", "datePublished": "2007-06-12T23:00:00", "dateReserved": "2007-06-12T00:00:00", "dateUpdated": "2024-08-07T14:05:29.289Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:winpt:winpt:1.2.0:*:*:*:*:*:*:*", "matchCriteriaId": "EBF6C00C-0039-40C1-9876-CA7ABE86ACDA", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under the wrong user ID, and possibly cause the user to encrypt a victim's correspondence with this attacker-supplied key, via a key ID composed of the attacker's user ID, space characters, an invalid WinPT message, additional space characters, and the victim's user ID."}, {"lang": "es", "value": "Vulnerabilidad de truncamiento visual en Windows Privacy Tray (WinPT) 1.2.0 permite a atacantes remotos con la intervenci\u00f3n del usuario instalar una clave listada bajo un ID de usuario incorrecto, y posiblemente provocar que el usuario encripte la correspondencia de la victima con la clave suministrada por el atacante, mediante una clave ID compuesta por el ID del usuario atacante, caracteres de espacio, un mensaje WinPT invalido, caracteres de espacio adicionales y el ID del usuario victima."}], "id": "CVE-2007-3201", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 7.1, "confidentialityImpact": "NONE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:N/I:C/A:N", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": true}]}, "published": "2007-06-12T23:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/41727"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2791"}, {"source": "cve@mitre.org", "url": "http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/471045/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/24412"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34813"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/41727"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2791"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://wald.intevation.org/tracker/index.php?func=detail&aid=327&group_id=14&atid=138"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/471045/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/24412"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/34813"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}