CVE-2007-0371

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP_BDc.SelectedFolder property value.

Affected products

Ccrp, Internet Explorer 7

Common Controls Replacement Project Browsedialog Server

All versions

CVSS 2.0

4.3 MEDIUM

EPSS

2.3% (82th percentile)

NVD status

Modified

Published

2007-01-19