CVE-2007-0218

Published Jun 12, 2007

Last updated 3 years ago

Overview

Description: Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.
Source: secure@microsoft.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 9.3
Impact score: 10
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-94

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "83E7C4A0-78CF-4B56-82BF-EC932BDD8ADF"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:5.01:sp4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F3F2A51E-2675-4993-B9C2-F2D176A92857"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D47247A3-7CD7-4D67-9D9B-A94A504DA1BE"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "644E2E89-F3E3-4383-B460-424D724EE62F"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "377F7D0C-6B44-4B90-BF90-DAF959880C6D"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:professional_x64:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "E0BBA081-24D5-4990-882F-69CB05CC28CF"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "9B339C33-8896-4896-88FF-88E74FDBC543"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1AB9988B-5A9C-4F6D-BCCC-4D03AC6E4CF9"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:*:*:x64:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CD264C73-360E-414D-BE22-192F92E5A0A3"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "6881476D-81A2-4DFD-AC77-82A8D08A0568"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp1:*:itanium:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "7D11FC8D-59DD-4CAC-B4D3-DABB7A9903F1"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_2003_server:sp2:*:itanium:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D21D1DFE-F61B-407E-A945-4F42F86947B0"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "693D3C1C-E3E4-49DB-9A13-44ADDFF82507"
          },
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "D34A558F-A656-43EB-AC52-C3710F77CDD8"
          },
          {
            "criteria": "cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "F9DC56EB-EDC4-4DFE-BA9B-B17FF4A91734"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6BC71FD8-D385-4507-BD14-B75FDD4C79E6"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References