CVE-2007-3091: Race Condition
Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code or perform other actions upon a page transition, with the permissions of the old page and the content of the new page, as demonstrated by setInterval functions that set location.href within a try/catch expression, aka the "bait & switch vulnerability" or "Race Condition Cross-Domain Information Disclosure Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3091?
CVE-2007-3091 is considered critical due to its ability to allow remote attackers to execute arbitrary code.
How do I fix CVE-2007-3091?
To fix CVE-2007-3091, update Microsoft Internet Explorer to the latest version and install all relevant security patches.
Which software is affected by CVE-2007-3091?
CVE-2007-3091 affects Microsoft Internet Explorer versions 6 and 7 on Windows XP, Windows Server 2003, and Windows Vista.
What type of vulnerability is CVE-2007-3091?
CVE-2007-3091 is a race condition vulnerability that allows attackers to exploit page transitions.
Can CVE-2007-3091 be exploited through web pages?
Yes, CVE-2007-3091 can be exploited through specially crafted web pages that interact with Internet Explorer.