CVE-2007-0612 Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, al...
HighCVSS 7.8
EPSS 44.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 5.0_ta3 | No fix listed |
| Microsoft ie | = 6.0-sp1 | No fix listed |
| Microsoft ie | = 7.0 | No fix listed |
| Microsoft internet explorer | = 5.0.1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp1 | No fix listed |
| Microsoft internet explorer | = 5.0.1-sp4 | No fix listed |
| Microsoft internet explorer | = 5.5 | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 7.0-beta1 | No fix listed |
| Microsoft internet explorer | = 7.0-beta2 | No fix listed |
References
- 20070128 Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS) mailing-list
- 20070129 Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS) mailing-list
- 32628 vdb-entry
- 2199 third-party-advisory
- www.determina.com
- 20070129 Internet Explorer 7 ActiveX bgColor property NULL pointer dereference (DoS) mailing-list
- 22288 exploit vdb-entry
- ie-activex-bgcolor-dos(31867) vdb-entry