PT-2007-3942 · Microsoft · Internet Explorer

Shinnai · Published 2007-05-11 · Updated 2017-10-11 · CVE-2007-2623

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Remote Display Dev kit version 1.2.1.0

Description The issue is related to multiple buffer overflows in RControl.dll, which can be exploited by remote attackers to cause a denial of service, specifically crashing Internet Explorer 7. This can be achieved by providing a long first argument to the connect function or a long InternalServer property value.

Recommendations For Remote Display Dev kit version 1.2.1.0, consider disabling the connect function or restricting the length of the InternalServer property value to prevent the buffer overflow and subsequent denial of service.

Exploit

Fix

Related Identifiers

CVE-2007-2623

Affected Products

Internet Explorer

References · 7

• 🔥 https://exploit-db.com/exploits/3891 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2623 · Security Note
• http://securityfocus.com/bid/23914 · Note
• http://moaxb.blogspot.com/2007/05/moaxb-10-rcontroldll-v-1210-denial-of.html · Note
• http://osvdb.org/36022 · Note
• http://shinnai.altervista.org/moaxb/20070510/rControl.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34231 · Note