CVE-2007-0612: Null Pointer Dereference
First published: Wed Jan 31 2007(Updated: )
Multiple ActiveX controls in Microsoft Windows 2000, XP, 2003, and Vista allows remote attackers to cause a denial of service (Internet Explorer crash) by accessing the bgColor, fgColor, linkColor, alinkColor, vlinkColor, or defaultCharset properties in the (1) giffile, (2) htmlfile, (3) jpegfile, (4) mhtmlfile, (5) ODCfile, (6) pjpegfile, (7) pngfile, (8) xbmfile, (9) xmlfile, (10) xslfile, or (11) wdfile objects in (a) mshtml.dll; or the (12) TriEditDocument.TriEditDocument or (13) TriEditDocument.TriEditDocument.1 objects in (b) triedit.dll, which cause a NULL pointer dereference.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Ie | =6.0-sp1 | |
| Microsoft Ie | =5.0_ta3 | |
| Microsoft Ie | =7.0 | |
| Microsoft Internet Explorer | =5.0.1 | |
| Microsoft Internet Explorer | =5.0.1-sp4 | |
| Microsoft Internet Explorer | =5.0.1-sp1 | |
| Microsoft Internet Explorer | =5.5 | |
| Microsoft Internet Explorer | =6.0 | |
| Microsoft Internet Explorer | =7.0-beta1 | |
| Microsoft Internet Explorer | =7.0-beta2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/052057.html
- http://www.determina.com/security.research/vulnerabilities/activex-bgcolor.html
- http://www.securityfocus.com/bid/22288
- http://securityreason.com/securityalert/2199
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0547.html
- http://osvdb.org/32628
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31867
- http://www.securityfocus.com/archive/1/458443/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/microsoft
- canonical/microsoft ie
- version/microsoft ie/6.0-sp1
- version/microsoft ie/5.0_ta3
- version/microsoft ie/7.0
- canonical/microsoft internet explorer
- version/microsoft internet explorer/5.0.1
- version/microsoft internet explorer/5.0.1-sp4
- version/microsoft internet explorer/5.0.1-sp1
- version/microsoft internet explorer/5.5
- version/microsoft internet explorer/6.0
- version/microsoft internet explorer/7.0-beta1
- version/microsoft internet explorer/7.0-beta2