Unscored CVE-2007-0947 EUVD-2007-0941GHSA-p98c-q7fj-cjwq

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows re…

Published May 8, 2007 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.

References

http://secunia.com/secunia_research/2007-36/advisory/
HPSBST02214 vendor-advisory
ADV-2007-1712 vdb-entry
1018019 vdb-entry
oval:org.mitre.oval:def:2048 vdb-entry signature
MS07-027 vendor-advisory
23769 third-party-advisory
23772 vdb-entry
34403 vdb-entry
TA07-128A third-party-advisory
ie-html-memory-code-execution-variant(33256) vdb-entry