CVE:CVE-2007-3893
CNNVD:CNNVD-200710-170
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。
IE在处理文件下载队列时存在漏洞，恶意网站可能利用此漏洞控制用户系统。
在处理文件下载队列时，如果Internet Explorer处理了多个并行的启动文件下载尝试，就可能导致内存破坏，使用已经释放的对象。攻击者可以通过构建特制的网页来利用该漏洞。如果用户查看网页，该漏洞可能允许远程执行指令。
solution:Upgrade microsoft internet_explorer to a higher version than 5.00.2516.1900,5.00.2614.3500,5.00.2919.800,5.00.2919.3800,5.00.2919.6307,5.00.2920.0000,5.00.3103.1000,5.00.3105.0106,5.00.3314.2101,5.00.3315.1000,5.00.3502.1000,5.00.3700.1000,6.00.2462.0000,6.00.2479.0006,6.00.2600.0000,6.00.2800.1106,6.00.2900.2180,6.00.3663.0000,6.00.3718.0000,6.00.3790.0000,6.00.3790.1830,6.00.3790.3959,7.0,7.0:beta1,7.0:beta2,7.0:beta3,7.00.5730.1100,7.00.6000.16386,7.00.6000.16441,and avoid the version 5.00.2516.1900,5.00.2614.3500,5.00.2919.800,5.00.2919.3800,5.00.2919.6307,5.00.2920.0000,5.00.3103.1000,5.00.3105.0106,5.00.3314.2101,5.00.3315.1000,5.00.3502.1000,5.00.3700.1000,6.00.2462.0000,6.00.2479.0006,6.00.2600.0000,6.00.2800.1106,6.00.2900.2180,6.00.3663.0000,6.00.3718.0000,6.00.3790.0000,6.00.3790.1830,6.00.3790.3959,7.0,7.0:beta1,7.0:beta2,7.0:beta3,7.00.5730.1100,7.00.6000.16386,7.00.6000.16441