NVD

Id
54390  
Name
CVE-2007-2222  
Description
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-06-12  
Modified Date
2012-11-05  
Seq
2007-2222  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275819 54390 CVE-2007-2222 oval:org.mitre.oval:def:2031  View
275820 54390 CVE-2007-2222 http://retrogod.altervista.org/win_speech_2k_sp4.html  View
275821 54390 CVE-2007-2222 http://retrogod.altervista.org/win_speech_xp_sp2.html  View
275822 54390 CVE-2007-2222 1018235  View
275823 54390 CVE-2007-2222 4065  View
275824 54390 CVE-2007-2222 VU#507433  View
275825 54390 CVE-2007-2222 MS07-033  View
275826 54390 CVE-2007-2222 4065  View
275827 54390 CVE-2007-2222 SSRT071438  View
275828 54390 CVE-2007-2222 24426  View
275829 54390 CVE-2007-2222 TA07-163A  View
275830 54390 CVE-2007-2222 ADV-2007-2153  View
275831 54390 CVE-2007-2222 ie-speech-code-execution(34630)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51781 JVNDB-2007-000444 Microsoft Internet Explorer の音声認識におけるバッファオーバーフローの脆弱性 Microsoft Internet Explorer の Microsoft Speech API 4 のコンポーネントである、ActiveListen (Xlisten.dll) および ActiveVoice (Xvoice.dll) には、不正な ActiveX を処理する際にバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-2222 25577 CVE-2007-2222 54390 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000444.html 2007-06-12 2007-06-19 View