CVE-2007-0947

CRITICAL 9.3CVE-2007-0947 · Published 08/05/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7.0`	No fix yet

Description

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.

References

secunia.com/advisories/23769 · Patch
secunia.com/secunia_research/2007-36/advisory · Patch
osvdb.org/34403
securityfocus.com/archive/1/468871/100/200/threaded
securityfocus.com/bid/23772 · Patch
securitytracker.com/id
us-cert.gov/cas/techalerts/TA07-128A.html · US Government Resource
vupen.com/english/advisories/2007/1712 · Vendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
exchange.xforce.ibmcloud.com/vulnerabilities/33256
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free