CVE-2007-0356: Medium severity Common Controls Replacement Project Foldertreeview Activex Control vulnerability
The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0356?
The severity of CVE-2007-0356 is considered high due to its potential to cause denial of service by crashing Internet Explorer 7.
How does CVE-2007-0356 impact users?
CVE-2007-0356 impacts users by causing Internet Explorer 7 to crash when a maliciously long property value is used.
What versions of Internet Explorer are affected by CVE-2007-0356?
CVE-2007-0356 specifically affects Microsoft Internet Explorer version 7.0.
How can I mitigate the risks associated with CVE-2007-0356?
To mitigate the risks of CVE-2007-0356, it is recommended to avoid using the affected ActiveX control and consider disabling ActiveX altogether.
Is there a patch available for CVE-2007-0356?
As of now, there is no specific patch released for CVE-2007-0356, but reviewing security updates from Microsoft is advisable.