CVE-2007-1091: microsoft ie

EPSS trend

Probability

25.52%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

+0.72 pp

From 24.80% on 19-09-2026

19-09-202619-10-2026

EPSS score

25.52%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

15 links

lcamtuf.coredump.cx/ietrapX Refsource MISC
www.securityfocus.com/bid/22680VDB EntryX Refsource BID
www.vupen.com/english/advisories/2007/0713VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/461023/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/32647VDB EntryX Refsource XF
www.securityfocus.com/archive/1/482366/100/0/threadedVendor AdvisoryX Refsource HP
secunia.com/advisories/23014Third Party AdvisoryX Refsource SECUNIAPatch
exchange.xforce.ibmcloud.com/vulnerabilities/32649VDB EntryX Refsource XF
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2162VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/archive/1/461027/100/0/threadedMailing ListX Refsource BUGTRAQ

Show all 15 references

securitytracker.com/id?1018788VDB EntryX Refsource SECTRACK
securityreason.com/securityalert/2291Third Party AdvisoryX Refsource SREASON
lists.grok.org.uk/pipermail/full-disclosure/2007-February/052630.htmlMailing ListX Refsource FULLDISC
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-057Vendor AdvisoryX Refsource MS
www.us-cert.gov/cas/techalerts/TA07-282A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource

Related vulnerabilities

CVE-2003-1559microsoftie+115.80%18y ago14-07-2008 23:00Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.CVE-2003-1048microsoftinternet_explorer+726.63%22y ago21-07-2004 04:00Double free vulnerability in mshtml.dll for certain versions of Internet Explorer 6.x allows remote attackers to cause a denial of service (application crash) via a malformed GIF image.CVE-2003-0701microsoftie+130.07%23y ago22-08-2003 04:00Buffer overflow in Internet Explorer 6 SP1 for certain languages that support double-byte encodings (e.g., Japanese) allows remote attackers to execute arbitrary code via the Type property of an Object tag, a variant of CVE-2003-0344.CVE-2003-0513microsoftie+19.77%22y ago16-03-2004 05:00Microsoft Internet Explorer allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Internet Explorer to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.CVE-2003-0344microsoftie+181.31%23y ago06-06-2003 04:00Buffer overflow in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to execute arbitrary code via / (slash) characters in the Type property of an Object tag in a web page.CVE-2013-3893microsoftinternet_explorerKEV87.53%13y ago18-09-2013 10:00Use-after-free vulnerability in the SetMouseCapture implementation in mshtml.dll in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript strings, as demonstrated by use of an ms-help: URL that triggers loading of hxds.dll.

All vulnerabilities inie internet_explorer

CVE-2007-1091: microsoft ie

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References