PT-2007-6412 · Microsoft · Internet Explorer

Published 2007-12-11 · Updated 2021-07-23 · CVE-2007-5347

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 5.01 through 7

Description: A remote code execution issue exists due to the way Internet Explorer displays Web pages with certain unexpected method calls to HTML objects, potentially corrupting system memory and allowing an attacker to execute arbitrary code if a user visits a specially crafted Web site. This could result in an attacker gaining the same user rights as the logged-on user.

Recommendations: For Microsoft Internet Explorer versions 5.01 through 7, update to a version that is not affected by this issue to prevent exploitation.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2007-5347

Affected Products

Internet Explorer

References · 12

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5347 · Security Note
• http://securityfocus.com/archive/1/485268/100/0/threaded · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5347 · Security Note
• http://secunia.com/advisories/28036 · Note
• http://us-cert.gov/cas/techalerts/TA07-345A.html · Note
• http://securitytracker.com/id?1019078 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/ms07-069 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38716 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4332 · Note
• http://vupen.com/english/advisories/2007/4184 · Note
• http://securityfocus.com/bid/26427 · Note