CVE-2007-5344

Опубликовано: 12 дек. 2007

Источник: nvd

CVSS2: 6.8

EPSS Средний

Описание

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or deleted objects, a different issue than CVE-2007-3902 and CVE-2007-3903, and a variant of "Uninitialized Memory Corruption Vulnerability."

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:ie:5.x:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.20763

Средний

6.8 Medium

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-w772-rr97-rmmm

github

почти 4 года назад