CVE-2007-1751

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 12-06-2007 09:30

Last modified: - 28-02-2022 05:50

Total changes: - 2

Description

Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka "Uninitialized Memory Corruption Vulnerability."

Common Vulnerability Scoring System (CVSS)

AV:N/AC:M/Au:N/C:C/I:C/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

9.3

Base score

8.6

10.0

Exploitability score

Impact score

Verification logic

AND

vendor=microsoft AND product=internet_explorer AND version=5.01 AND update=sp4

vendor=microsoft AND product=internet_explorer AND version=6 AND update=sp1

vendor=microsoft AND product=windows_2000 AND version=- AND update=sp4

AND

vendor=microsoft AND product=internet_explorer AND version=6

vendor=microsoft AND product=internet_explorer AND version=7.0

vendor=microsoft AND product=windows_2003_server AND version=- AND update=sp1

vendor=microsoft AND product=windows_2003_server AND version=- AND update=sp2

vendor=microsoft AND product=windows_vista AND version=-

vendor=microsoft AND product=windows_xp AND version=- AND update=sp2

Reference

http://www.zerodayinitiative.com/advisories/ZDI-07-038.html
TA07-163A-Third Party Advisory, US Government Resource
24418-Broken Link, Third Party Advisory, VDB Entry
1018235-Broken Link, Third Party Advisory, VDB Entry
25627-Broken Link, Vendor Advisory
ADV-2007-2153-Broken Link, Vendor Advisory
35351-Broken Link
ie-uninitialized-object-code-execution(34626)-Third Party Advisory, VDB Entry
oval:org.mitre.oval:def:1978-Tool Signature
MS07-033-Patch, Vendor Advisory
SSRT071438-Broken Link, Third Party Advisory, VDB Entry
20070612 ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability-Broken Link, Third Party Advisory, VDB Entry

Keywords

CVE-2007-1751

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2007-1751

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures