CVE

Id
25579  
CVE No.
CVE-2007-2222  
Status
Candidate  
Description
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.  
Phase
Assigned (20070424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255474 25579 CVE-2007-2222 EXPLOIT-DB:4065  View
255475 25579 CVE-2007-2222 URL:http://www.exploit-db.com/exploits/4065  View
255476 25579 CVE-2007-2222 MILW0RM:4065  View
255477 25579 CVE-2007-2222 URL:http://www.milw0rm.com/exploits/4065  View
255478 25579 CVE-2007-2222 MISC:http://retrogod.altervista.org/win_speech_2k_sp4.html  View
255479 25579 CVE-2007-2222 MISC:http://retrogod.altervista.org/win_speech_xp_sp2.html  View
255480 25579 CVE-2007-2222 HP:HPSBST02231  View
255481 25579 CVE-2007-2222 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
255482 25579 CVE-2007-2222 HP:SSRT071438  View
255483 25579 CVE-2007-2222 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
255484 25579 CVE-2007-2222 MS:MS07-033  View
255485 25579 CVE-2007-2222 URL:http://www.microsoft.com/technet/security/bulletin/ms07-033.mspx  View
255486 25579 CVE-2007-2222 CERT:TA07-163A  View
255487 25579 CVE-2007-2222 URL:http://www.us-cert.gov/cas/techalerts/TA07-163A.html  View
255488 25579 CVE-2007-2222 CERT-VN:VU#507433  View
255489 25579 CVE-2007-2222 URL:http://www.kb.cert.org/vuls/id/507433  View
255490 25579 CVE-2007-2222 BID:24426  View
255491 25579 CVE-2007-2222 URL:http://www.securityfocus.com/bid/24426  View
255492 25579 CVE-2007-2222 OSVDB:35353  View
255493 25579 CVE-2007-2222 URL:http://osvdb.org/35353  View
255494 25579 CVE-2007-2222 VUPEN:ADV-2007-2153  View
255495 25579 CVE-2007-2222 URL:http://www.vupen.com/english/advisories/2007/2153  View
255496 25579 CVE-2007-2222 OVAL:oval:org.mitre.oval:def:2031  View
255497 25579 CVE-2007-2222 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:2031  View
255498 25579 CVE-2007-2222 SECTRACK:1018235  View
255499 25579 CVE-2007-2222 URL:http://securitytracker.com/id?1018235  View
255500 25579 CVE-2007-2222 SECUNIA:25627  View
255501 25579 CVE-2007-2222 URL:http://secunia.com/advisories/25627  View
255502 25579 CVE-2007-2222 XF:ie-speech-code-execution(34630)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51937 JVNDB-2007-000600 Microsoft Windows OLE の substringData のメソッドにおけるバッファオーバーフローの脆弱性 Microsoft Windows の Object linking and embedding (OLE) には TextNode や XMLDOM オブジェクトの substringData のメソッドにおいてバッファオーバーフローの脆弱性が存在します。 CVE-2007-2224 25579 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000600.html  View