CVE-2007-0218: Code Injection
Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dll, which triggers memory corruption during a call to the IObjectSafety function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0218?
CVE-2007-0218 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-0218?
To remediate CVE-2007-0218, users should upgrade to a newer, unsupported version of Internet Explorer and apply all relevant security updates.
Which versions of Internet Explorer are affected by CVE-2007-0218?
CVE-2007-0218 affects Internet Explorer versions 5.01 and 6, specifically with SP4 and SP1.
Can CVE-2007-0218 be exploited remotely?
Yes, CVE-2007-0218 can be exploited remotely by attackers to execute arbitrary code on the affected systems.
Are there any workarounds for CVE-2007-0218?
Disabling scripting and ActiveX controls in Internet Explorer may reduce the risk of exploitation from CVE-2007-0218.