Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2007-3902


Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."


Published

2007-12-12T00:46:00.000

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-189
    CWE-399

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft ie 5.x Yes
Application microsoft ie 6.0 Yes
Application microsoft ie 6.0 Yes
Application microsoft internet_explorer 5 Yes
Application microsoft internet_explorer 5.01 Yes
Application microsoft internet_explorer 5.1 Yes
Application microsoft internet_explorer 5.01 Yes
Application microsoft internet_explorer 5.01 Yes
Application microsoft internet_explorer 5.01 Yes
Application microsoft internet_explorer 5.01 Yes
Application microsoft internet_explorer 5.2.3 Yes
Application microsoft internet_explorer 5.5 Yes
Application microsoft internet_explorer 5.5 Yes
Application microsoft internet_explorer 5.5 Yes
Application microsoft internet_explorer 5.5 Yes
Application microsoft internet_explorer 6 Yes
Application microsoft internet_explorer 6 Yes
Application microsoft internet_explorer 6.0 Yes
Application microsoft internet_explorer 6.0.2600 Yes
Application microsoft internet_explorer 6.0.2800 Yes
Application microsoft internet_explorer 6.0.2800.1106 Yes
Application microsoft internet_explorer 6.0.2900 Yes
Application microsoft internet_explorer 6.0.2900.2180 Yes
Application microsoft internet_explorer 7 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0 Yes
Application microsoft internet_explorer 7.0.5730.11 Yes

References