CVE-2007-1162

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) IsFolderAvailable or (2) RootFolder property value, different vectors than CVE-2007-0371.

Affected products

Ccrp Browsedialog Server, Internet Explorer 7

Common Controls Replacement Project Browsedialog Server

All versions

Fix

Available

CVSS 2.0

7.8 HIGH

EPSS

3.1% (87th percentile)

NVD status

Modified

Published

2007-02-28