← Database

CVE-2007-3903

MEDIUM CVSS: 6.8 Published: 2007-12-12 Modified: 2026-06-16

Description

Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."

Affected Platforms

Microsoft IeMicrosoft Internet Explorer

Weakness Type

CWE-399, NVD-CWE-noinfo

References