NVD

Id
52331  
Name
CVE-2007-0099  
Description
Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via many nested tags in an XML document in an IFRAME, when synchronous document rendering is frequently disrupted with asynchronous events, as demonstrated using a JavaScript timer, which can trigger NULL pointer dereferences or memory corruption, aka "MSXML Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-01-08  
Modified Date
2012-10-30  
Seq
2007-0099  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
264358 52331 CVE-2007-0099 20070104 Re: Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)  View
264359 52331 CVE-2007-0099 http://isc.sans.org/diary.php?storyid=2004  View
264360 52331 CVE-2007-0099 HPSBST02386  View
264361 52331 CVE-2007-0099 oval:org.mitre.oval:def:5793  View
264362 52331 CVE-2007-0099 20070104 Concurrency strikes MSIE (potentially exploitable msxml3 flaws)  View
264363 52331 CVE-2007-0099 1021164  View
264364 52331 CVE-2007-0099 MS08-069  View
264365 52331 CVE-2007-0099 20070104 Concurrency strikes MSIE (potentially exploitable msxml3 flaws)  View
264366 52331 CVE-2007-0099 20070104 RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)  View
264367 52331 CVE-2007-0099 20070104 Re: RE: [Full-disclosure] Concurrency strikes MSIE (potentially exploitablemsxml3 flaws)  View
264368 52331 CVE-2007-0099 21872  View
264369 52331 CVE-2007-0099 TA08-316A  View
264370 52331 CVE-2007-0099 ADV-2008-3111  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52498 JVNDB-2007-001190 Microsoft XML コア サービスの msxml3 モジュールにおける任意のコードを実行される脆弱性 Internet Explorer や他のアプリケーションで使用されている Microsoft XML コア サービスの msxml3 モジュールには、IFRAME 内の XML ドキュメントの処理に不備があるため、競合状態となる脆弱性が存在します。 CVE-2007-0099 23454 CVE-2007-0099 52331 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001190.html 2007-01-08 2008-12-09 View