CVE-2007-3902
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet...
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
- Record
CVE-2007-3902- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-189, CWE-399
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
- Record
CVE-2007-3902- Updated
- 2026-11-02
EUVDEUVD-2007-3886 No score
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
- Record
EUVD-2007-3886- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-27m8-q4mw-5g3g No score
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet...
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code by calling the setExpression method and then modifying the outerHTML property of an HTML element, one variant of "Uninitialized Memory Corruption Vulnerability."
- Record
GHSA-27m8-q4mw-5g3g- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3902 is a high vulnerability (CVSS 9.3) in Microsoft Internet Explorer, published December 12, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 35.5%, the 98th percentile. No source names a fixed version.
References
securityfocus.com/bid/26506
securitytracker.com/id?1019078
labs.idefense.com/intelligence/vulnerabilities/display.php?id=631
secunia.com/advisories/28036
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069
Show 8 moreShow less
vupen.com/english/advisories/2007/4184
us-cert.gov/cas/techalerts/TA07-345A.html
zerodayinitiative.com/advisories/ZDI-07-073.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4582
exchange.xforce.ibmcloud.com/vulnerabilities/38713
nvd.nist.gov/vuln/detail/CVE-2007-3902
github.com/advisories/GHSA-27m8-q4mw-5g3g