CVE-2007-5347 : Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute ar

Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," aka "DHTML Object Memory Corruption Vulnerability."

Published 2007-12-12 00:46:00

Updated 2021-07-23 15:06:36

Source Microsoft Corporation

View at NVD, CVE.org

Vulnerability category: Memory CorruptionExecute code

Products affected by CVE-2007-5347

Microsoft » IE » Version: 5.X
cpe:2.3:a:microsoft:ie:5.x:*:*:*:*:*:*:*
Matching versions
Microsoft » IE » Version: 6.0 Update SP1
cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
Matching versions
Microsoft » IE » Version: 6.0 Update SP2
cpe:2.3:a:microsoft:ie:6.0:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5
cpe:2.3:a:microsoft:internet_explorer:5:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.01 Update SP3
cpe:2.3:a:microsoft:internet_explorer:5.01:sp3:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.01 Update SP4
cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.5 Update SP2
cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6 Update SP1
cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6
cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7
cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.01
cpe:2.3:a:microsoft:internet_explorer:5.01:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0.2900.2180
cpe:2.3:a:microsoft:internet_explorer:6.0.2900.2180:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0.2900
cpe:2.3:a:microsoft:internet_explorer:6.0.2900:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta2
cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta1
cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0.5730.11
cpe:2.3:a:microsoft:internet_explorer:7.0.5730.11:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0.2800.1106
cpe:2.3:a:microsoft:internet_explorer:6.0.2800.1106:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0.2600
cpe:2.3:a:microsoft:internet_explorer:6.0.2600:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0.2800
cpe:2.3:a:microsoft:internet_explorer:6.0.2800:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta
cpe:2.3:a:microsoft:internet_explorer:7.0:beta:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0
cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta3
cpe:2.3:a:microsoft:internet_explorer:7.0:beta3:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.5
cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.1
cpe:2.3:a:microsoft:internet_explorer:5.1:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.5 Update Preview
cpe:2.3:a:microsoft:internet_explorer:5.5:preview:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.01 Update SP1
cpe:2.3:a:microsoft:internet_explorer:5.01:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.01 Update SP2
cpe:2.3:a:microsoft:internet_explorer:5.01:sp2:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.2.3
cpe:2.3:a:microsoft:internet_explorer:5.2.3:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.5 Update SP1
cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-5347

EPSS FAQ

62.74%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5347

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P	8.6	6.4	NIST
Access Vector: Network Access Complexity: Medium Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

CWE ids for CVE-2007-5347

CWE-399

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5347

Jump to

Vulnerability Details : CVE-2007-5347

Products affected by CVE-2007-5347

Exploit prediction scoring system (EPSS) score for CVE-2007-5347

CVSS scores for CVE-2007-5347

CWE ids for CVE-2007-5347

References for CVE-2007-5347