$ cve CVE-2007-0612 JSON

CVE-2007-0612 EXPLOIT

7.8

HIGH · CVSS 2.0 · EPSS 43.9% (pctl 99)

Patch early

A public exploit exists.

Description

Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.

Scoring

CVSS	7.8 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS	43.91% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2007-01-31
Last modified	2026-06-16

Affected (2)

Vendor	Product
microsoft	ie
microsoft	internet explorer

Public exploits

Source	Title	Date
exploit-db	Microsoft Internet Explorer 5.0.1 - Multiple ActiveX Controls Denial of Service Vulnerabilities	2007-01-29

References

→ the Explorer · watch your stack · NVD