CVE-2007-0947

Опубликовано: 08 мая 2007

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.

Комментарий

FrSIRT has noted the following: Multiple vulnerabilities have been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of an affected system.

Ссылки

http://secunia.com/advisories/23769
Patch
Vendor Advisory
http://secunia.com/secunia_research/2007-36/advisory/
Patch
Vendor Advisory
http://www.osvdb.org/34403
http://www.securityfocus.com/archive/1/468871/100/200/threaded
http://www.securityfocus.com/bid/23772
Patch
http://www.securitytracker.com/id?1018019
http://www.us-cert.gov/cas/techalerts/TA07-128A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/1712
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
https://exchange.xforce.ibmcloud.com/vulnerabilities/33256
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048
http://secunia.com/advisories/23769
Patch
Vendor Advisory
http://secunia.com/secunia_research/2007-36/advisory/
Patch
Vendor Advisory
http://www.osvdb.org/34403
http://www.securityfocus.com/archive/1/468871/100/200/threaded
http://www.securityfocus.com/bid/23772
Patch
http://www.securitytracker.com/id?1018019
http://www.us-cert.gov/cas/techalerts/TA07-128A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/1712
Vendor Advisory
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*

Одно из

cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*

Конфигурация 3

Одновременно

cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*

Одно из

cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*

Конфигурация 4

Одновременно

cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.55738

Средний

9.3 Critical

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-p98c-q7fj-cjwq

github

почти 4 года назад

EPSS

Процентиль: 98%

0.55738

Средний

9.3 Critical

CVSS2

Дефекты

CWE-399