PT-2007-2070 · Microsoft · Internet Explorer+3

Published 2007-01-31 · Updated 2021-07-23 · CVE-2007-0612

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version

Description The issue allows remote attackers to cause a denial of service, specifically an Internet Explorer crash, by accessing certain properties in various objects. These properties include bgColor, fgColor, linkColor, alinkColor, vlinkColor, and defaultCharset in objects such as giffile, htmlfile, jpegfile, mhtmlfile, ODCfile, pjpegfile, pngfile, xbmfile, xmlfile, xslfile, and wdfile in mshtml.dll, as well as TriEditDocument.TriEditDocument or TriEditDocument.TriEditDocument.1 objects in triedit.dll. This results in a NULL pointer dereference.

Recommendations For Microsoft Windows versions prior to the fixed version, consider disabling access to the mshtml.dll and triedit.dll libraries as a temporary workaround to minimize the risk of exploitation. Restrict the use of the vulnerable objects and properties until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0612

Affected Products

Internet Explorer

Windows

Mshtml.Dll

Triedit.Dll

References · 10

• 🔥 https://exploit-db.com/exploits/29536 · Exploit
• 🔥 http://securityfocus.com/bid/22288 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0612 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31867 · Note
• http://determina.com/security.research/vulnerabilities/activex-bgcolor.html · Note
• http://securityfocus.com/archive/1/458443/100/0/threaded · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0547.html · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052057.html · Note
• http://securityreason.com/securityalert/2199 · Note
• http://osvdb.org/32628 · Note