CVE-2007-2222 Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execu...
HighCVSS 9.3
EPSS 54.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 5.01-sp4 | No fix listed |
| Microsoft internet explorer | = 6-sp1 | No fix listed |
| Microsoft internet explorer | = 6 | No fix listed |
| Microsoft internet explorer | = 7.0 | No fix listed |
References
- 35353 vdb-entry
- retrogod.altervista.org
- retrogod.altervista.org
- 25627 third-party-advisory vendor-advisory
- 1018235 vdb-entry
- 4065 exploit
- VU#507433 third-party-advisory us-government-resource
- SSRT071438 vendor-advisory
- 24426 vdb-entry
- TA07-163A third-party-advisory us-government-resource
- ADV-2007-2153 vdb-entry vendor-advisory
- MS07-033 vendor-advisory
- ie-speech-code-execution(34630) vdb-entry
- oval:org.mitre.oval:def:2031 signature vdb-entry