Vulnerability Details CVE-2007-0945
Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista allows remote attackers to execute arbitrary code via certain property methods that may trigger memory corruption, aka "Property Memory Corruption Vulnerability."
Exploit prediction scoring system (EPSS) score
EPSS Score 0.591
EPSS Ranking 98.1%
CVSS Severity
CVSS v2 Score 9.3
References
- http://secunia.com/advisories/23769
- http://www.osvdb.org/34401
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/23769
- http://www.securitytracker.com/id?1018019
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html
- http://www.vupen.com/english/advisories/2007/1712
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1463
- http://secunia.com/advisories/23769
- http://www.osvdb.org/34401
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/archive/1/468871/100/200/threaded
- http://www.securityfocus.com/bid/23769
- http://www.securitytracker.com/id?1018019
- http://www.us-cert.gov/cas/techalerts/TA07-128A.html
- http://www.vupen.com/english/advisories/2007/1712
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1463
Products affected by CVE-2007-0945
-
cpe:2.3:a:microsoft:internet_explorer:6
-
cpe:2.3:a:microsoft:internet_explorer:6.0
-
cpe:2.3:a:microsoft:internet_explorer:7.0
-
cpe:2.3:o:microsoft:windows_2000:-
-
cpe:2.3:o:microsoft:windows_2003_server:sp1
-
cpe:2.3:o:microsoft:windows_2003_server:sp2
-
cpe:2.3:o:microsoft:windows_vista:-
-
cpe:2.3:o:microsoft:windows_xp:-