CVE-2007-0612 : Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.

Published 2007-01-31 11:28:00

Updated 2021-07-23 15:06:30

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Products affected by CVE-2007-0612

Microsoft » IE » Version: 6.0 Update SP1
cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
Matching versions
Microsoft » IE » Version: 7.0 Vista Edition
cpe:2.3:a:microsoft:ie:7.0:*:vista:*:*:*:*:*
Matching versions
Microsoft » IE » Version: 5.0 Ta3
cpe:2.3:a:microsoft:ie:5.0_ta3:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.0.1 Update SP4
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.0.1
cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.0.1 Update SP1
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta2
cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta1
cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.5
cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-0612

EPSS FAQ

65.39%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 98 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-0612

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-0612

Jump to

Vulnerability Details : CVE-2007-0612

Products affected by CVE-2007-0612

Exploit prediction scoring system (EPSS) score for CVE-2007-0612

CVSS scores for CVE-2007-0612

References for CVE-2007-0612