Description
Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.
References (11)
Core 11
Core References
Patch, Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2007-36/advisory/
Third Party Advisory, VDB Entry vendor-advisory
x_refsource_hp
http://www.securityfocus.com/archive/1/468871/100/200/threaded
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2007/1712
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id?1018019
Third Party Advisory, VDB Entry vdb-entry
signature
x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048
Vendor Advisory vendor-advisory
x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/23769
Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/23772
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/34403
US Government Resource third-party-advisory
x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA07-128A.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/33256
Scores
EPSS
0.3196
EPSS Percentile
98.1%
Details
CWE
CWE-399
Status
published
Products (2)
microsoft/internet_explorer
6
microsoft/internet_explorer
7.0
Published
May 08, 2007
Tracked Since
Feb 18, 2026