CVE

Id
25573  
CVE No.
CVE-2007-2216  
Status
Candidate  
Description
The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability."  
Phase
Assigned (20070424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255370 25573 CVE-2007-2216 BUGTRAQ:20070815 TlbInf32 ActiveX Command Execution  View
255371 25573 CVE-2007-2216 URL:http://www.securityfocus.com/archive/1/archive/1/476742/100/0/threaded  View
255372 25573 CVE-2007-2216 MS:MS07-045  View
255373 25573 CVE-2007-2216 URL:http://www.microsoft.com/technet/security/bulletin/ms07-045.mspx  View
255374 25573 CVE-2007-2216 CERT:TA07-226A  View
255375 25573 CVE-2007-2216 URL:http://www.us-cert.gov/cas/techalerts/TA07-226A.html  View
255376 25573 CVE-2007-2216 BID:25289  View
255377 25573 CVE-2007-2216 URL:http://www.securityfocus.com/bid/25289  View
255378 25573 CVE-2007-2216 VUPEN:ADV-2007-2869  View
255379 25573 CVE-2007-2216 URL:http://www.vupen.com/english/advisories/2007/2869  View
255380 25573 CVE-2007-2216 OSVDB:36396  View
255381 25573 CVE-2007-2216 URL:http://www.osvdb.org/36396  View
255382 25573 CVE-2007-2216 OVAL:oval:org.mitre.oval:def:2109  View
255383 25573 CVE-2007-2216 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2109  View
255384 25573 CVE-2007-2216 SECTRACK:1018562  View
255385 25573 CVE-2007-2216 URL:http://securitytracker.com/id?1018562  View
255386 25573 CVE-2007-2216 SECUNIA:26419  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51775 JVNDB-2007-000438 Microsoft Windows の Schannel のセキュリティパッケージに任意のコードを実行される脆弱性 Microsoft Windows のセキュリティで保護されたチャネル (Schannel) のセキュリティパッケージには、Web ブラウザやアプリケーションを通して行われた SSL ハンドシェイクの過程において、サーバから送られた不正なデジタル署名を処理した場合にサービス運用妨害 (DoS) 状態にされる、または任意のコードを実行される脆弱性が存在します。 CVE-2007-2218 25573 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000438.html  View