CVE-2007-6255: Buffer Overflow
Published Apr 23, 2008
·Updated
Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host argument to an unspecified method.
Affected Software
18 affected components
Microsoft Windows 2000=sp4
Microsoft Internet Explorer=5.01-sp4
Microsoft Internet Explorer=6-sp1
Microsoft Windows Server 2003
Microsoft Windows Server 2003=sp1
Microsoft Windows Server 2003=sp1
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2003=sp2
Microsoft Windows Server 2003=sp2
Microsoft Windows XP
Microsoft Windows XP=sp2
Microsoft Windows XP=sp2
Microsoft Internet Explorer=6
Microsoft Windows Vista
Microsoft Windows Vista
Microsoft Windows XP
Microsoft Windows XP=sp2
Microsoft Internet Explorer=7
Event History
Apr 23, 2008
CVE Published
01:05 PM
Data Sourced
01:05 PM
DescriptionWeaknessAffected Software
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-6255?
CVE-2007-6255 is classified as critical due to the potential for remote code execution.
2
How do I fix CVE-2007-6255?
To fix CVE-2007-6255, apply the latest security patches from Microsoft for the affected software.
3
Which software is affected by CVE-2007-6255?
CVE-2007-6255 affects Microsoft Windows 2000, Windows XP, Windows Server 2003, and their respective versions.
4
What type of vulnerability is CVE-2007-6255?
CVE-2007-6255 is a buffer overflow vulnerability in the Microsoft HeartbeatCtl ActiveX control.
5
Can CVE-2007-6255 be exploited remotely?
Yes, CVE-2007-6255 can be exploited remotely by attackers to execute arbitrary code.