CVE-2007-2216
- State
- Published
- Severity
- Not scored
- Published
- Aug 14, 2007
- Updated
- Aug 7, 2024
- Reserved
- Apr 24, 2007
Description
The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 36396vdb-entry
- MS07-045vendor-advisory
- TA07-226Athird-party-advisory
- oval:org.mitre.oval:def:2109vdb-entrysignature
- ADV-2007-2869vdb-entry
- 26419third-party-advisory
- 25289vdb-entry
- 1018562vdb-entry
- 20070815 TlbInf32 ActiveX Command Executionmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.