PT-2007-6412 · Microsoft · Internet Explorer

Publicado 2007-12-11 · Atualizado 2021-07-23 · CVE-2007-5347

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 7

Description: A remote code execution issue exists due to the way Internet Explorer displays Web pages with certain unexpected method calls to HTML objects, potentially corrupting system memory and allowing an attacker to execute arbitrary code if a user visits a specially crafted Web site. This could result in an attacker gaining the same user rights as the logged-on user.

Recommendations: For Microsoft Internet Explorer versions 5.01 through 7, update to a version that is not affected by this issue to prevent exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2007-5347

Produtos afetados

Internet Explorer

Referências · 12

• http://secunia.com/advisories/28036 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5347 · Nota de Segurança
• http://securityfocus.com/archive/1/485268/100/0/threaded · Aviso do Fabricante
• http://us-cert.gov/cas/techalerts/TA07-345A.html · Nota
• http://securitytracker.com/id?1019078 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-069 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38716 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5347 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4332 · Nota
• http://vupen.com/english/advisories/2007/4184 · Nota
• http://securityfocus.com/bid/26427 · Nota