PT-2007-1700 · Microsoft · Internet Explorer

Publicado 2007-02-13 · Atualizado 2021-07-23 · CVE-2007-0219

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01, 6, and 7

Description A remote code execution issue exists due to the way Internet Explorer instantiates COM objects not intended for use in Internet Explorer. An attacker could exploit this by constructing a specially crafted Web page, potentially allowing remote code execution if a user views the page. Successful exploitation could allow an attacker to take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01, 6, and 7, consider restricting the instantiation of COM objects in Internet Explorer to prevent potential exploitation. As a temporary workaround, consider disabling the use of ActiveX controls from Msb1fren.dll, Htmlmm.ocx, and Blnmgrps.dll in Internet Explorer until a patch is available.

Correção

Identificadores relacionados

CVE-2007-0219

Produtos afetados

Internet Explorer

Referências · 17

• http://osvdb.org/31895 · Nota
• http://securitytracker.com/id?1017643 · Nota
• http://osvdb.org/31894 · Nota
• http://kb.cert.org/vuls/id/771788 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-016 · Nota
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Nota
• http://secunia.com/advisories/24156 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32427 · Nota
• http://vupen.com/english/advisories/2007/0584 · Nota
• http://xforce.iss.net/xforce/xfdb/32427 · Nota
• http://securityfocus.com/bid/22504 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A257 · Nota
• http://osvdb.org/31893 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016 · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/0584 · Nota