CVE-2007-1114

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 12.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-02-26 · updated 2026-06-16

Description

The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an HTTP Content-Type header or META tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated using the UTF-7 character set.

Affected products

Microsoft Ie: 7.0

References

http://secunia.com/advisories/24314
http://www.hardened-php.net/advisory_032007.142.html
http://www.osvdb.org/32119
http://www.securityfocus.com/archive/1/461076/100/0/threaded
http://www.securityfocus.com/bid/22701
http://www.vupen.com/english/advisories/2007/0744
http://secunia.com/advisories/24314
http://www.hardened-php.net/advisory_032007.142.html
http://www.osvdb.org/32119
http://www.securityfocus.com/archive/1/461076/100/0/threaded
http://www.securityfocus.com/bid/22701
http://www.vupen.com/english/advisories/2007/0744

Get alerted when CVE-2007-1114 or the next vulnerability affects your stack