Vulnerability Details : CVE-2007-0612

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.

Vulnerability category: Memory CorruptionDenial of service

Published 2007-01-31 11:28:00

Updated 2021-07-23 15:06:30

Source MITRE

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2007-0612

Probability of exploitation activity in the next 30 days: 39.91%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ

CVSS scores for CVE-2007-0612

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Source
7.8	HIGH	AV:N/AC:L/Au:N/C:N/I:N/A:C	10.0	6.9	[email protected]
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Complete

References for CVE-2007-0612

Products affected by CVE-2007-0612

Microsoft » IE » Version: 6.0 Update SP1
cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*
Matching versions
Microsoft » IE » Version: 7.0 Vista Edition
cpe:2.3:a:microsoft:ie:7.0:*:vista:*:*:*:*:*
Matching versions
Microsoft » IE » Version: 5.0 Ta3
cpe:2.3:a:microsoft:ie:5.0_ta3:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.0.1 Update SP4
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.0.1
cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.0.1 Update SP1
cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta2
cpe:2.3:a:microsoft:internet_explorer:7.0:beta2:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 7.0 Update Beta1
cpe:2.3:a:microsoft:internet_explorer:7.0:beta1:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 6.0
cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*
Matching versions
Microsoft » Internet Explorer » Version: 5.5
cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*
Matching versions