Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the (1) POP3, (2) IMAP, or (3) SMTP protocol via an arbitrary valid certificate.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Windows Phone 7 加密问题漏洞
Vulnerability Description
Microsoft Windows Phone 7是美国微软（Microsoft）公司发布的一套手机操作系统。 Microsoft Windows Phone 7中存在漏洞，该漏洞源于未验证X.509证书的主题通用名(CN)字段中的域名。中间人攻击者可利用该漏洞通过任意有效证书，欺骗(1)POP3(2)IMAP或(3)SMTP协议的SSL服务器。
CVSS Information
N/A
Vulnerability Type
N/A