{"vuid":"VU#783761","idnumber":"783761","name":"Microsoft Windows \"MHTML\" protocol handler fails to properly handle URL redirections","keywords":["Microsoft","Windows","information disclosure","MHTML protocol handler","URL redirections","ms07-jun"],"overview":"Microsoft Windows \"MHTML\" protocol handler fails to properly interpret URL redirections, which may cause information disclosure.","clean_desc":"The Microsoft Windows \"MHTML\" protocol handler contains an information disclosure vulnerability in the way that it interprets URL redirections. The \"MHTML\" protocol handler fails to properly interpret HTTP server-side redirect through the \"MHTML\" protocol, which may allow Internet Explorer to bypass Internet Explorer domain restrictions.","impact":"By convincing a user to visit a specially crafted website, a  remote, unauthenticated attacker may be able to access sensitive information.","resolution":"Apply an update This issue is addressed by Microsoft Security Bulletin MS07-034.","workarounds":"Workarounds Microsoft has provided the following workarounds to address this issue: Disable the MHTML protocol handler. 1. Click Start and then click Run. Enter regedit.exe in the text box and click OK. 2. Navigate to HKEY_CLASSES_ROOT\\CLSID\\{05300401-BCBC-11d0-85E3-00C04FD85AB4}. 3. Right click {05300401-BCBC-11d0-85E3-00C04FD85AB4} and select Permissions. 4. Click Advanced. 5. Uncheck Allow inheritable permissions from the parent to propagate…\n6. Click Remove, and then click OK. Click Yes and OKon subsequent screens. Impact of workaround: This workaround disables page rendering for MHTML Web pages. Configure Internet Explorer to prompt before running Active Scripting or to disable Active Scripting in the Internet and Local intranet security zone. 1. In Internet Explorer, click Internet Options on the Tools menu. 2. Click the Security tab. 3. Click Internet, and then click Custom Level. 4. Under Settings, in the Scripting section, under Active Scripting, click Prompt or Disable, and then click OK. 5. Click Local intranet, and then click Custom Level. 6. Under Settings, in the Scripting section, under Active Scripting, click Prompt or Disable, and then click OK. 7. Click OK two times to return to Internet Explorer. Please see Microsoft Security Bulletin MS07-034 for further details.","sysaffected":"","thanks":"This vulnerability was reported in Microsoft Security Bulletin \nMS07-034","author":"This document was written by Katie Steiner","public":["h","t","t","p",":","/","/","w","w","w",".","m","i","c","r","o","s","o","f","t",".","c","o","m","/","t","e","c","h","n","e","t","/","s","e","c","u","r","i","t","y","/","b","u","l","l","e","t","i","n","/","m","s","0","7","-","0","3","4",".","m","s","p","x"],"cveids":["CVE-2006-2111"],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2007-06-12T18:10:33Z","publicdate":"2007-06-12T00:00:00Z","datefirstpublished":"2007-06-13T20:11:02Z","dateupdated":"2007-06-21T19:36:13Z","revision":15,"vrda_d1_directreport":"0","vrda_d1_population":"4","vrda_d1_impact":"2","cam_widelyknown":"15","cam_exploitation":"0","cam_internetinfrastructure":"5","cam_population":"15","cam_impact":"8","cam_easeofexploitation":"2","cam_attackeraccessrequired":"20","cam_scorecurrent":"1.8","cam_scorecurrentwidelyknown":"2.25","cam_scorecurrentwidelyknownexploited":"4.05","ipprotocol":"","cvss_accessvector":"","cvss_accesscomplexity":"","cvss_authentication":null,"cvss_confidentialityimpact":"","cvss_integrityimpact":"","cvss_availabilityimpact":"","cvss_exploitablity":null,"cvss_remediationlevel":"","cvss_reportconfidence":"","cvss_collateraldamagepotential":"","cvss_targetdistribution":"","cvss_securityrequirementscr":"","cvss_securityrequirementsir":"","cvss_securityrequirementsar":"","cvss_basescore":"","cvss_basevector":"","cvss_temporalscore":"","cvss_environmentalscore":"","cvss_environmentalvector":"","metric":1.8,"vulnote":null}