CVE-2007-5347

CWE-3994 documents4 sources
Severity
6.8MEDIUM
EPSS
48.3%
top 2.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft IEMicrosoft Internet Explorer
Timeline
PublishedDec 12
Latest updateMay 1

Description

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."

CVSS vector

AV:N/AC:M/C:P/I:P/A:PExploitability: 8.6 | Impact: 6.4

Affected Packages2 packages

▶NVDmicrosoft/internet_explorer15 versions+14
▶NVDmicrosoft/ie5.x, 6.0+1

🔴Vulnerability Details

3
GHSA
GHSA-m6g3-p66g-2jwj: Microsoft Internet Explorer 5↗2022-05-01
▶
CVEList
CVE-2007-5347: Microsoft Internet Explorer 5↗2007-12-12
▶
VulnCheck
Microsoft Internet Explorer 5.01 through 7 DHTML Object Memory Corruption Vulnerability↗2007
▶
CVE-2007-5347 (MEDIUM CVSS 6.8) | Microsoft Internet Explorer 5.01 th | cvebase.io