PT-2007-1700 · Microsoft · Internet Explorer

Published 2007-02-13 · Updated 2021-07-23 · CVE-2007-0219

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01, 6, and 7

Description A remote code execution issue exists due to the way Internet Explorer instantiates COM objects not intended for use in Internet Explorer. An attacker could exploit this by constructing a specially crafted Web page, potentially allowing remote code execution if a user views the page. Successful exploitation could allow an attacker to take complete control of an affected system.

Recommendations For Microsoft Internet Explorer versions 5.01, 6, and 7, consider restricting the instantiation of COM objects in Internet Explorer to prevent potential exploitation. As a temporary workaround, consider disabling the use of ActiveX controls from Msb1fren.dll, Htmlmm.ocx, and Blnmgrps.dll in Internet Explorer until a patch is available.

Fix

Related Identifiers

CVE-2007-0219

Affected Products

Internet Explorer

References · 17

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-016 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0219 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0219 · Security Note
• http://osvdb.org/31895 · Note
• http://securitytracker.com/id?1017643 · Note
• http://osvdb.org/31894 · Note
• http://kb.cert.org/vuls/id/771788 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-016 · Note
• http://us-cert.gov/cas/techalerts/TA07-044A.html · Note
• http://secunia.com/advisories/24156 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32427 · Note
• http://vupen.com/english/advisories/2007/0584 · Note
• http://xforce.iss.net/xforce/xfdb/32427 · Note
• http://securityfocus.com/bid/22504 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A257 · Note