CVE-2007-0612: Null Pointer Dereference
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0612?
CVE-2007-0612 is rated as a denial of service vulnerability that can crash Internet Explorer.
How do I fix CVE-2007-0612?
To fix CVE-2007-0612, users should update their Internet Explorer to the latest version that has addressed this vulnerability.
Which versions of Internet Explorer are affected by CVE-2007-0612?
CVE-2007-0612 affects multiple versions of Internet Explorer including 5.0, 5.5, 6.0, and 7.0.
What type of attack does CVE-2007-0612 enable?
CVE-2007-0612 enables remote attackers to cause a denial of service by manipulating certain ActiveX properties.
Is CVE-2007-0612 exploitable over the internet?
Yes, CVE-2007-0612 can be exploited by remote attackers via specially crafted web content accessed through Internet Explorer.