Vulnerability in Common Controls Replacement Project Browsedialog Server

CVE-2007-1162

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) IsFolderAvailable or (2) RootFolder property value, different vectors than CVE-2007-0371.

EPSS: 0.031 (86.3th percentile) — read the EPSS interpretation.

Affected products

References