Skip to content

CVE-2007-0371 A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via...

MediumCVSS 4.3 EPSS 2.4% PoC
Published
Updated
Exploit status
Proof-of-concept only

Description

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP_BDc.SelectedFolder property value.

Affected products

ProductAffected versionsFixed in
common controls replacement project browsedialog server All versions No fix listed

References

  • 34647 vdb-entry
  • 22110 exploit vdb-entry vendor-advisory
  • 3155 exploit