Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
2007-12-12T00:46:00.000
2025-04-09T00:30:58.490
Deferred
CVSSv2: 9.3 (HIGH)
AV:N/AC:M/Au:N/C:C/I:C/A:C
8.6
10.0
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | microsoft | ie | 5.x | Yes |
Application | microsoft | ie | 6.0 | Yes |
Application | microsoft | ie | 6.0 | Yes |
Application | microsoft | internet_explorer | 5 | Yes |
Application | microsoft | internet_explorer | 5.01 | Yes |
Application | microsoft | internet_explorer | 5.1 | Yes |
Application | microsoft | internet_explorer | 5.01 | Yes |
Application | microsoft | internet_explorer | 5.01 | Yes |
Application | microsoft | internet_explorer | 5.01 | Yes |
Application | microsoft | internet_explorer | 5.01 | Yes |
Application | microsoft | internet_explorer | 5.2.3 | Yes |
Application | microsoft | internet_explorer | 5.5 | Yes |
Application | microsoft | internet_explorer | 5.5 | Yes |
Application | microsoft | internet_explorer | 5.5 | Yes |
Application | microsoft | internet_explorer | 5.5 | Yes |
Application | microsoft | internet_explorer | 6 | Yes |
Application | microsoft | internet_explorer | 6 | Yes |
Application | microsoft | internet_explorer | 6.0 | Yes |
Application | microsoft | internet_explorer | 6.0.2600 | Yes |
Application | microsoft | internet_explorer | 6.0.2800 | Yes |
Application | microsoft | internet_explorer | 6.0.2800.1106 | Yes |
Application | microsoft | internet_explorer | 6.0.2900 | Yes |
Application | microsoft | internet_explorer | 6.0.2900.2180 | Yes |
Application | microsoft | internet_explorer | 7 | Yes |
Application | microsoft | internet_explorer | 7.0 | Yes |
Application | microsoft | internet_explorer | 7.0 | Yes |
Application | microsoft | internet_explorer | 7.0 | Yes |
Application | microsoft | internet_explorer | 7.0 | Yes |
Application | microsoft | internet_explorer | 7.0 | Yes |
Application | microsoft | internet_explorer | 7.0.5730.11 | Yes |