PT-2007-3922 · Unknown · Audiocdripperocx.Ocx

Published 2007-05-11 · Updated 2018-10-16 · CVE-2007-2603

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions AudioCDRipperOCX.ocx version 1.0

Description The issue is related to an unspecified vulnerability in the Init function of the Audio CD Ripper OCX ActiveX control. This vulnerability allows remote attackers to cause a denial of service, resulting in a NULL dereference and crash of Internet Explorer, via unspecified vectors.

Recommendations For AudioCDRipperOCX.ocx version 1.0, consider disabling the Init function in the AudioCDRipperOCX.ocx ActiveX control as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-2603

Affected Products

Audiocdripperocx.Ocx

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-2603 · Security Note
• http://osvdb.org/36216 · Note
• http://securityfocus.com/bid/23900 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34206 · Note
• http://securityreason.com/securityalert/2708 · Note
• http://securityfocus.com/archive/1/468070/100/0/threaded · Note