CVE-2007-2216 The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by....
HighCVSS 9.3
EPSS 41.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.01 | No fix listed |
| Microsoft internet explorer | = 6-sp1 | No fix listed |
| Microsoft internet explorer | = 7 | No fix listed |
References
- 26419 third-party-advisory vendor-advisory
- 1018562 vdb-entry
- 36396 vdb-entry
- 20070815 TlbInf32 ActiveX Command Execution mailing-list
- 25289 patch vdb-entry
- TA07-226A third-party-advisory us-government-resource
- ADV-2007-2869 vdb-entry vendor-advisory
- MS07-045 vendor-advisory
- oval:org.mitre.oval:def:2109 signature vdb-entry