Description
Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that creates, modifies, deletes, and accesses document objects using the tags property, which triggers heap corruption, related to uninitialized or deleted objects, a different issue than CVE-2007-3902 and CVE-2007-3903, and a variant of "Uninitialized Memory Corruption Vulnerability."
References
- ie-element-code-execution(38715) vdb-entry
- 26817 vdb-entry
- 1019078 vdb-entry
- SSRT071506 vendor-advisory
- 28036 third-party-advisory
- 20071211 ZDI-07-075: Microsoft Internet Explorer Element Tags Vulnerability mailing-list
- MS07-069 vendor-advisory
- ADV-2007-4184 vdb-entry
- oval:org.mitre.oval:def:4480 vdb-entry signature
- TA07-345A third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-075.html