CVE-2007-3902

Currently unrated

Key Information:

Vendor
Microsoft
Status
Internet Explorer
Ie
Vendor
CVE Published:
12 December 2007

Summary

Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."

References

http://www.securityfocus.com/bid/26506
vdb-entryx_refsource_BID
http://securitytracker.com/id?1019078
vdb-entryx_refsource_SECTRACK
http://labs.idefense.com/intelligence/vulnerabilities/dis...
third-party-advisoryx_refsource_IDEFENSE

EPSS Score

90% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.