Lucene search

K
cve[email protected]CVE-2007-0218
HistoryJun 12, 2007 - 7:30 p.m.

CVE-2007-0218

2007-06-1219:30:00
CWE-94
web.nvd.nist.gov
24
cve-2007-0218
microsoft
internet explorer
code execution
urlmon.dll
com object
memory corruption
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.837 High

EPSS

Percentile

98.5%

Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.

Affected configurations

NVD
Node
microsoftwindows_2000sp4
AND
microsoftinternet_explorerMatch5.01sp4
OR
microsoftinternet_explorerMatch6sp1
Node
microsoftwindows_2003_serverMatchsp1
OR
microsoftwindows_2003_serverMatchsp2
OR
microsoftwindows_xpprofessional_x64
OR
microsoftwindows_xpsp2
OR
microsoftwindows_xpsp2professional_x64
AND
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7.0
Node
microsoftwindows_2003_serverx64
OR
microsoftwindows_2003_serversp2x64
OR
microsoftwindows_2003_serverMatchsp1itanium
OR
microsoftwindows_2003_serverMatchsp2itanium
AND
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7.0
Node
microsoftwindows_vistagold
OR
microsoftwindows_vistagoldx64
AND
microsoftinternet_explorerMatch7.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.837 High

EPSS

Percentile

98.5%