CVE-2007-3903

Related Files

Zero Day Initiative Advisory 07-074

Posted Dec 12, 2007

Authored by Tipping Point, Sam Thomas | Site zerodayinitiative.com

A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The flaw exists due to improper use of the "cloneNode" and "nodeValue" javascript functions. When a specially crafted element is used during a repetitive call to one of these functions memory corruption can occur leading to remote code execution. Affected versions are 6 and 7.

tags | advisory, remote, arbitrary, javascript, code execution

advisories | CVE-2007-3903

SHA-256 | 5b0265d2921e9d43ddba03b852a3eda5f1e765e427af5b5c99645f945bfa8589

Download | Favorite | View