CVE-2007-3903
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via...
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
- Record
CVE-2007-3903- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-399
- Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
- Record
CVE-2007-3903- Updated
- 2026-11-02
EUVDEUVD-2007-3887 No score
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
- Record
EUVD-2007-3887- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9xr7-28fx-hh67 No score
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via...
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated calls to the (1) cloneNode or (2) nodeValue JavaScript function, a different issue than CVE-2007-3902 and CVE-2007-5344, a variant of "Uninitialized Memory Corruption Vulnerability."
- Record
GHSA-9xr7-28fx-hh67- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3903 is a medium vulnerability (CVSS 6.8) in Microsoft Internet Explorer, published December 12, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 31.3%, the 98th percentile. No source names a fixed version.
References
securitytracker.com/id?1019078
securityfocus.com/archive/1/484888/100/0/threaded
zerodayinitiative.com/advisories/ZDI-07-074.html
secunia.com/advisories/28036
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4553
Show 7 moreShow less
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-069
vupen.com/english/advisories/2007/4184
exchange.xforce.ibmcloud.com/vulnerabilities/38714
us-cert.gov/cas/techalerts/TA07-345A.html
nvd.nist.gov/vuln/detail/CVE-2007-3903
github.com/advisories/GHSA-9xr7-28fx-hh67