GCVE - cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*

part: a version: 7 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Ie (`d6c68fe7-98fc-54b4-a290-1745b169773d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-0248`	vulnerable	2026-06-08 04:52:01.232705	Details available Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability." Published: 2010-01-22T21:20:00.000Z Updated: 2024-10-21T16:43:33.939Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/55778 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-2529`	vulnerable	2026-06-08 04:51:29.065913	Details available Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability." Published: 2009-10-14T10:00:00.000Z Updated: 2024-10-21T16:40:02.227Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6419	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-1529`	vulnerable	2026-06-08 04:51:23.859628	Details available Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka "Uninitialized Memory Corruption Vulnerability." Published: 2009-06-10T18:00:00.000Z Updated: 2024-10-21T16:31:00.075Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1538 http://www.securityfocus.com/archive/1/504205/100/0/threaded https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 http://www.zerodayinitiative.com/advisories/ZDI-09-036 http://www.securityfocus.com/bid/35223	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0551`	vulnerable	2026-06-08 04:51:09.930822	Details available Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability." Published: 2009-04-15T03:49:00.000Z Updated: 2024-10-21T16:26:23.249Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1028 http://osvdb.org/53624 http://www.us-cert.gov/cas/techalerts/TA09-104A.html http://secunia.com/advisories/34678 http://support.nortel.com/go/main.jsp?cscat=BLTNDETAIL&id=871138	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.