CVE

Id
27259  
CVE No.
CVE-2007-3902  
Status
Candidate  
Description
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."  
Phase
Assigned (20070719)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
279944 27259 CVE-2007-3902 IDEFENSE:20071211 Microsoft Internet Explorer JavaScript setExpression Heap Corruption Vulnerability  View
279945 27259 CVE-2007-3902 URL:http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=631  View
279946 27259 CVE-2007-3902 BUGTRAQ:20071211 ZDI-07-073: Microsoft Internet Explorer setExpression Vulnerability  View
279947 27259 CVE-2007-3902 URL:http://www.securityfocus.com/archive/1/archive/1/484887/100/0/threaded  View
279948 27259 CVE-2007-3902 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-073.html  View
279949 27259 CVE-2007-3902 HP:HPSBST02299  View
279950 27259 CVE-2007-3902 URL:http://www.securityfocus.com/archive/1/archive/1/485268/100/0/threaded  View
279951 27259 CVE-2007-3902 HP:SSRT071506  View
279952 27259 CVE-2007-3902 URL:http://www.securityfocus.com/archive/1/archive/1/485268/100/0/threaded  View
279953 27259 CVE-2007-3902 MS:MS07-069  View
279954 27259 CVE-2007-3902 URL:http://www.microsoft.com/technet/security/bulletin/ms07-069.mspx  View
279955 27259 CVE-2007-3902 CERT:TA07-345A  View
279956 27259 CVE-2007-3902 URL:http://www.us-cert.gov/cas/techalerts/TA07-345A.html  View
279957 27259 CVE-2007-3902 BID:26506  View
279958 27259 CVE-2007-3902 URL:http://www.securityfocus.com/bid/26506  View
279959 27259 CVE-2007-3902 VUPEN:ADV-2007-4184  View
279960 27259 CVE-2007-3902 URL:http://www.vupen.com/english/advisories/2007/4184  View
279961 27259 CVE-2007-3902 OVAL:oval:org.mitre.oval:def:4582  View
279962 27259 CVE-2007-3902 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:4582  View
279963 27259 CVE-2007-3902 SECTRACK:1019078  View
279964 27259 CVE-2007-3902 URL:http://securitytracker.com/id?1019078  View
279965 27259 CVE-2007-3902 SECUNIA:28036  View
279966 27259 CVE-2007-3902 URL:http://secunia.com/advisories/28036  View
279967 27259 CVE-2007-3902 XF:ie-uninit-object-code-execution(38713)  View

Related JVN