CVE-2007-2216: Critical severity Microsoft Internet Explorer vulnerability
The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2216?
CVE-2007-2216 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2007-2216?
To fix CVE-2007-2216, users should update their Internet Explorer to the latest version available from Microsoft.
Which versions of Internet Explorer are affected by CVE-2007-2216?
CVE-2007-2216 affects Internet Explorer versions 5.01, 6 SP1, and 7.
What kind of attacks can exploit CVE-2007-2216?
Attackers can exploit CVE-2007-2216 to execute arbitrary code on the victim's system.
Is CVE-2007-2216 a local or remote vulnerability?
CVE-2007-2216 is classified as a remote vulnerability, allowing exploitation over the internet.