CVE

Id
24299  
CVE No.
CVE-2007-0942  
Status
Candidate  
Description
Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.  
Phase
Assigned (20070214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
238465 24299 CVE-2007-0942 HP:HPSBST02214  View
238466 24299 CVE-2007-0942 URL:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded  View
238467 24299 CVE-2007-0942 HP:SSRT071422  View
238468 24299 CVE-2007-0942 URL:http://www.securityfocus.com/archive/1/archive/1/468871/100/200/threaded  View
238469 24299 CVE-2007-0942 MS:MS07-027  View
238470 24299 CVE-2007-0942 URL:http://www.microsoft.com/technet/security/bulletin/ms07-027.mspx  View
238471 24299 CVE-2007-0942 CERT:TA07-128A  View
238472 24299 CVE-2007-0942 URL:http://www.us-cert.gov/cas/techalerts/TA07-128A.html  View
238473 24299 CVE-2007-0942 VUPEN:ADV-2007-1712  View
238474 24299 CVE-2007-0942 URL:http://www.vupen.com/english/advisories/2007/1712  View
238475 24299 CVE-2007-0942 OSVDB:34399  View
238476 24299 CVE-2007-0942 URL:http://www.osvdb.org/34399  View
238477 24299 CVE-2007-0942 OVAL:oval:org.mitre.oval:def:1939  View
238478 24299 CVE-2007-0942 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1939  View
238479 24299 CVE-2007-0942 SECTRACK:1018019  View
238480 24299 CVE-2007-0942 URL:http://www.securitytracker.com/id?1018019  View
238481 24299 CVE-2007-0942 SECUNIA:23769  View
238482 24299 CVE-2007-0942 URL:http://secunia.com/advisories/23769  View
238483 24299 CVE-2007-0942 XF:ie-chtskdic-com-code-execution(33252)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51697 JVNDB-2007-000360 Microsoft Internet Explorer の CTableCol::OnPropertyChange メソッドにおけるメモリ破壊の脆弱性 Microsoft Internet Explorer には、CTableCol::OnPropertyChange メソッドに不備が存在し、オブジェクトが初期化されていない、または既に削除されているオブジェクトにアクセスが可能なため、メモリ破壊の脆弱性が存在します。 CVE-2007-0944 24299 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000360.html  View