CVE-2007-0945 : Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2

Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista allows remote attackers to execute arbitrary code via certain property methods that may trigger memory corruption, aka "Property Memory Corruption Vulnerability."

Published 2007-05-08 23:19:00

Updated 2025-04-09 00:30:58

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute code

Products affected by CVE-2007-0945

Microsoft » Internet Explorer » Version: 6 Update SP1
cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows 2000 » Update SP4
Microsoft » Internet Explorer » Version: 6.0
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Xp » Update SP2
Microsoft » Internet Explorer » Version: 7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows Xp » Update SP2

Exploit prediction scoring system (EPSS) score for CVE-2007-0945

EPSS FAQ

59.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-0945

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
9.3	HIGH	AV:N/AC:M/Au:N/C:C/I:C/A:C	8.6	10.0	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

References for CVE-2007-0945

Jump to

Vulnerability Details : CVE-2007-0945

Products affected by CVE-2007-0945

Exploit prediction scoring system (EPSS) score for CVE-2007-0945

CVSS scores for CVE-2007-0945

References for CVE-2007-0945