CVE-2007-0214
First published: Tue Feb 13 2007(Updated: )
The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execute arbitrary code via unspecified functions, related to uninitialized parameters.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Windows Server 2003 | =64-bit | |
| Microsoft Windows Server 2003 | =itanium | |
| Microsoft Windows Server 2003 | =sp1 | |
| Microsoft Windows XP | =sp2 | |
| Microsoft Windows XP | ||
| Microsoft Windows 2000 | =sp4 | |
| Microsoft Windows Server 2003 | =sp1 | |
| Microsoft Windows Server 2003 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.kb.cert.org/vuls/id/563756
- http://www.securityfocus.com/bid/22478
- http://www.osvdb.org/31884
- http://www.securitytracker.com/id?1017635
- http://secunia.com/advisories/24136
- http://www.us-cert.gov/cas/techalerts/TA07-044A.html
- http://www.vupen.com/english/advisories/2007/0577
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A125
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-008
Frequently Asked Questions
What is the severity of CVE-2007-0214?
CVE-2007-0214 is considered to have a critical severity level due to its potential to allow remote code execution.
How do I fix CVE-2007-0214?
To fix CVE-2007-0214, ensure that your system is updated with the latest security patches provided by Microsoft.
What systems are affected by CVE-2007-0214?
CVE-2007-0214 affects Microsoft Windows 2000 SP4, Windows XP SP2, and Windows Server 2003 SP1.
What type of vulnerability is CVE-2007-0214?
CVE-2007-0214 is a remote code execution vulnerability associated with the HTML Help ActiveX control (Hhctrl.ocx).
Can I safely use software that is vulnerable to CVE-2007-0214?
It is not safe to use software vulnerable to CVE-2007-0214 unless it has been patched, as it poses a significant risk of exploitation.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microsoft
- canonical/microsoft windows server 2003
- version/microsoft windows server 2003/64-bit
- version/microsoft windows server 2003/itanium
- version/microsoft windows server 2003/sp1
- canonical/microsoft windows xp
- version/microsoft windows xp/sp2
- canonical/microsoft windows 2000
- version/microsoft windows 2000/sp4