CVE-2007-0944

Description

Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; and 6 on Windows XP SP2, or Windows Server 2003 SP1 or SP2 allows remote attackers to execute arbitrary code by calling deleteCell on a named table row in a named table column, then accessing the column, which causes Internet Explorer to access previously deleted objects, aka the "Uninitialized Memory Corruption Vulnerability."

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 64.93% Top 5%

Vendor Advisory securityfocus.com Vendor Advisory microsoft.com Vendor Advisory zerodayinitiative.com

Affected: n/a n/a

References

Link	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/33253	vdb entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1722	vdb entry signature
http://www.securityfocus.com/archive/1/468871/100/200/threaded	vendor advisory
http://www.vupen.com/english/advisories/2007/1712	vdb entry
http://www.securitytracker.com/id?1018019	vdb entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-027	vendor advisory
http://secunia.com/advisories/23769	third party advisory
http://www.zerodayinitiative.com/advisories/ZDI-07-027.html	vendor advisory
http://www.osvdb.org/34400	vdb entry
http://www.us-cert.gov/cas/techalerts/TA07-128A.html	third party advisory us government resource
http://www.securityfocus.com/archive/1/467989/100/0/threaded	mailing list
http://www.securityfocus.com/bid/23771	vdb entry

Frequently Asked Questions

What is the severity of CVE-2007-0944?: CVE-2007-0944 has been scored as a critical severity vulnerability.
How to fix CVE-2007-0944?: To fix CVE-2007-0944, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2007-0944 being actively exploited in the wild?: It is possible that CVE-2007-0944 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~65% probability that this vulnerability will be exploited by malicious actors in the next 30 days.