NVD

Id
53154  
Name
CVE-2007-0942  
Description
Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-08  
Modified Date
2011-03-07  
Seq
2007-0942  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
268901 53154 CVE-2007-0942 oval:org.mitre.oval:def:1939  View
268902 53154 CVE-2007-0942 MS07-027  View
268903 53154 CVE-2007-0942 SSRT071422  View
268904 53154 CVE-2007-0942 1018019  View
268905 53154 CVE-2007-0942 TA07-128A  View
268906 53154 CVE-2007-0942 ADV-2007-1712  View
268907 53154 CVE-2007-0942 ie-chtskdic-com-code-execution(33252)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51696 JVNDB-2007-000359 Microsoft Internet Explorer における COM オブジェクトのインスタンス化によるメモリ破壊の脆弱性 Microsoft Internet Explorer には、特定の COM オブジェクトを ActiveX コントロールとしてインスタンス化をする際に、メモリ破壊の脆弱性が存在します。 CVE-2007-0942 24297 CVE-2007-0942 53154 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000359.html 2007-05-08 2007-05-29 View