CVE-2007-0947

Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, resulting in accessing deallocated memory of CMarkup objects, aka the second of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0946.

Link	Resource
http://secunia.com/secunia_research/2007-36/advisory/	Patch Vendor Advisory
http://www.securityfocus.com/bid/23772	Patch
http://www.securitytracker.com/id?1018019
http://secunia.com/advisories/23769	Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-128A.html	US Government Resource
http://www.osvdb.org/34403
http://www.vupen.com/english/advisories/2007/1712	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/33256
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2048
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
http://www.securityfocus.com/archive/1/468871/100/200/threaded

Configuration 1

---

Published : 2007-05-08 11:19

Updated : 2021-07-23 03:05

---

NVD link : CVE-2007-0947

Mitre link : CVE-2007-0947

No products.

CWE-399