CVEvulnerability
CVE-2007-0947
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-05-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.
Affected configurations
• microsoft internet explorer 6
• microsoft internet explorer 7.0
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/23769 Patch, Vendor Advisory
- http://secunia.com/secunia_research/2007-36/advisory/ Patch, Vendor Advisory
- http://www.osvdb.org/34403 www.osvdb.org
- http://www.securityfocus.com/archive/1/468871/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23772 Patch
- http://www.securitytracker.com/id?1018019 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/1712 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33256 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048 oval.cisecurity.org
- http://secunia.com/advisories/23769 Patch, Vendor Advisory
- http://secunia.com/secunia_research/2007-36/advisory/ Patch, Vendor Advisory
- http://www.osvdb.org/34403 www.osvdb.org
- http://www.securityfocus.com/archive/1/468871/100/200/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/23772 Patch
- http://www.securitytracker.com/id?1018019 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/1712 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33256 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048 oval.cisecurity.org