Description
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
References
- 26506 vdb-entry
- 1019078 vdb-entry
- 20071211 Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability third-party-advisory
- SSRT071506 vendor-advisory
- 28036 third-party-advisory
- MS07-069 vendor-advisory
- ADV-2007-4184 vdb-entry
- TA07-345A third-party-advisory
- 20071211 ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability mailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-07-073.html
- oval:org.mitre.oval:def:4582 vdb-entry signature
- ie-uninit-object-code-execution(38713) vdb-entry