CVE-2007-0946 — Out-of-bounds Write in Microsoft Internet Explorer

4 documents2 sources
Severity
9.3CRITICALNVD
EPSS
59.5%
top 1.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Internet Explorer
Timeline
PublishedMay 8
Latest updateMay 1

Description

Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-p98c-q7fj-cjwq: Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attack↗2022-05-01
▶
GHSA
GHSA-352r-wjp6-2638: Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers↗2022-05-01
▶
CVE-2007-0946 — Out-of-bounds Write in Microsoft | cvebase