CVE-2007-0946

high · 9.3

Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.

9.3

CVSS

31.0%

EPSS (exploit prob.)

98th

EPSS percentile

2007-05-08

Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
microsoft	windows_xp	all versions
microsoft	internet_explorer	7.0
microsoft	windows_2003_server	sp1
microsoft	internet_explorer	7.0
microsoft	windows_2003_server	sp2
microsoft	internet_explorer	7.0
microsoft	windows_vista	all versions
microsoft	internet_explorer	7.0

Check a specific version with /api/v1/cve/match.

References

http://secunia.com/advisories/23769
http://www.osvdb.org/34402
http://www.securityfocus.com/archive/1/468871/100/200/threaded
http://www.securityfocus.com/bid/23770
http://www.securitytracker.com/id?1018019
http://www.us-cert.gov/cas/techalerts/TA07-128A.html
http://www.vupen.com/english/advisories/2007/1712
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
https://exchange.xforce.ibmcloud.com/vulnerabilities/33255
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1441
http://secunia.com/advisories/23769
http://www.osvdb.org/34402
http://www.securityfocus.com/archive/1/468871/100/200/threaded
http://www.securityfocus.com/bid/23770
http://www.securitytracker.com/id?1018019
http://www.us-cert.gov/cas/techalerts/TA07-128A.html
http://www.vupen.com/english/advisories/2007/1712
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027
https://exchange.xforce.ibmcloud.com/vulnerabilities/33255
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1441

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-0946