Информационная безопасность
[RU] switch to
English Version



CVECVE-2007-3903
СтатусUNKNOWN
ОписаниеMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
ВажностьMedium
CVSS score6,8
CVSS vector(AV:N/AC:M/Au:N/C:P/I:P/A:P)
PhaseASSIGNED (03.10.2011)
NVD:http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-3903
ReferencesBID : 26816
 BUGTRAQ : 20071211 ZDI-07-074: Microsoft Internet Explorer Node Manipulation Memory Corruption
 CERT : TA07-345A
 HP : SSRT071506
 HP : SSRT071506
 MISC : http://www.zerodayinitiative.com/advisories/ZDI-07...
 MS : MS07-069
 OVAL : oval:org.mitre.oval:def:4553
 SECTRACK : 1019078
 SECUNIA : 28036
 VUPEN : ADV-2007-4184
 XF : ie-clonenode-nodevalue-code-execution(38714)
SecurityVulns:Многочисленные уязвимости в Microsoft Internet Explorer

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород

 
 



Rating@Mail.ru
test server