CVE-2007-1162

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) IsFolderAvailable or (2) RootFolder property value, different vectors than CVE-2007-0371.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2007-03-02

Last modified

2024-08-07

Affected products

• Browsedialog Server (Common Controls Replacement Project)

References

• http://osvdb.org/34963
• http://www.securityfocus.com/bid/22645
• http://www.securityfocus.com/data/vulnerabilities/exploits/22645.html
• https://www.exploit-db.com/exploits/3350