Description
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
References
- 1019078 vdb-entry
- 20071211 ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption mailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-07-074.html
- SSRT071506 vendor-advisory
- 28036 third-party-advisory
- oval:org.mitre.oval:def:4553 vdb-entry signature
- MS07-069 vendor-advisory
- ADV-2007-4184 vdb-entry
- ie-clonenode-nodevalue-code-execution(38714) vdb-entry
- TA07-345A third-party-advisory
- 26816 vdb-entry