CVE-2007-0946: Critical severity Microsoft Windows XP vulnerability

Published May 8, 2007

Updated

Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote attackers to execute arbitrary code via crafted HTML objects, which results in memory corruption, aka the first of two "HTML Objects Memory Corruption Vulnerabilities" and a different issue than CVE-2007-0947.

Affected Software

5 affected components

Microsoft Windows XP=sp2

Microsoft Internet Explorer=7.0

Microsoft Windows 2003 Server=sp1

Microsoft Windows 2003 Server=sp2

Microsoft Windows Vista

Event History

May 8, 2007

CVE Published

11:19 PM

Data Sourced

11:19 PM

DescriptionWeaknessAffected Software

May 9, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0946?

CVE-2007-0946 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-0946?

To mitigate CVE-2007-0946, it is recommended to apply the latest security updates from Microsoft for Internet Explorer and the affected Windows operating systems.

Who is affected by CVE-2007-0946?

CVE-2007-0946 affects users of Microsoft Internet Explorer 7 running on Windows XP SP2, Windows Server 2003 SP1 or SP2, and Windows Vista.

What are the consequences of exploiting CVE-2007-0946?

Exploitation of CVE-2007-0946 can lead to arbitrary code execution, allowing attackers to take complete control of the affected system.

Is CVE-2007-0946 still a concern today?

Although CVE-2007-0946 was disclosed in 2007, systems still running the affected software versions are at risk and should be updated immediately.