PT-2007-5128 · Microsoft · Internet Explorer

Published 2007-12-11 · Updated 2021-07-23 · CVE-2007-3902

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 7

Description: The issue is related to a use-after-free vulnerability in the CRecalcProperty function, allowing remote attackers to execute arbitrary code. This can be achieved by calling the setExpression method and then modifying the outerHTML property of an HTML element. The vulnerability exists due to Internet Explorer accessing an object that has not been correctly initialized or that has been deleted, which could be exploited by constructing a specially crafted Web page, potentially leading to remote code execution.

Recommendations: For Microsoft Internet Explorer versions 5.01 through 7, consider applying security patches or updates to fix the vulnerability. As a temporary workaround, restrict access to specially crafted Web pages to minimize the risk of exploitation. Avoid using the setExpression method in conjunction with modifying the outerHTML property of an HTML element until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-399

CWE-189

Related Identifiers

CVE-2007-3902

Affected Products

Internet Explorer

References · 15

• http://securityfocus.com/archive/1/485268/100/0/threaded · Vendor Advisory
• http://vupen.com/english/advisories/2007/4184 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-3902 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3902 · Security Note
• http://secunia.com/advisories/28036 · Vendor Advisory
• http://securityfocus.com/archive/1/484887/100/0/threaded · Note
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=631 · Note
• http://zerodayinitiative.com/advisories/ZDI-07-073.html · Note
• http://us-cert.gov/cas/techalerts/TA07-345A.html · Note
• http://securitytracker.com/id?1019078 · Note
• http://securityfocus.com/bid/26506 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-069 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38713 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4582 · Note