Vulnerability in N/a
CVE-2007-2222
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX…
EPSS: 0.641 (98.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
References
- ie-speech-code-execution(34630) (vdb-entry, x_refsource_XF)
- 35353 (x_refsource_OSVDB, vdb-entry)
- VU#507433 (x_refsource_CERT-VN, third-party-advisory)
- 25627 (x_refsource_SECUNIA, third-party-advisory)
- 4065 (exploit, x_refsource_EXPLOIT-DB)
- SSRT071438 (x_refsource_HP, vendor-advisory)
- 24426 (vdb-entry, x_refsource_BID)
- 1018235 (vdb-entry, x_refsource_SECTRACK)
- retrogod.altervista.org/win_speech_2k_sp4.html (x_refsource_MISC)
- ADV-2007-2153 (vdb-entry, x_refsource_VUPEN)