PT-2007-5441 · Internet Explorer · Toolbar Gaming Toolbar

Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4248

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Toolbar Gaming toolbar for Internet Explorer (affected versions not specified)

Description The issue concerns the CallCmd function in the toolbar gaming.dll component, which can be exploited by remote attackers to cause a denial of service. This is achieved through a NULL dereference, resulting in a browser crash. The specific vectors used for the attack are not detailed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-4248

Affected Products

Toolbar Gaming Toolbar

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4248 · Security Note
• http://securityfocus.com/archive/1/475534/100/0/threaded · Note
• http://osvdb.org/46802 · Note
• http://securityreason.com/securityalert/3004 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35803 · Note