QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-0099

Back to search

CVE-2007-0099

Published: Jan 8, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via many nested tags in an XML document in an IFRAME, when synchronous document rendering is frequently disrupted with asynchronous events, as demonstrated using a JavaScript timer, which can trigger NULL pointer dereferences or memory corruption, aka "MSXML Memory Corruption Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

SSRT080164
vendor-advisory
x_refsource_HP
32627
vdb-entry
x_refsource_OSVDB
TA08-316A
third-party-advisory
x_refsource_CERT
21872
vdb-entry
x_refsource_BID
23655
third-party-advisory
x_refsource_SECUNIA
HPSBST02386
vendor-advisory
x_refsource_HP
ADV-2008-3111
vdb-entry
x_refsource_VUPEN
MS08-069
vendor-advisory
x_refsource_MS
1021164
vdb-entry
x_refsource_SECTRACK
oval:org.mitre.oval:def:5793
vdb-entry
signature
x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now