CVEvulnerability
CVE-2007-2222
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-06-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.
Affected configurations
• microsoft internet explorer 5.01
• microsoft internet explorer 6
• microsoft internet explorer 7.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/35353 osvdb.org
- http://retrogod.altervista.org/win_speech_2k_sp4.html retrogod.altervista.org
- http://retrogod.altervista.org/win_speech_xp_sp2.html retrogod.altervista.org
- http://secunia.com/advisories/25627 Vendor Advisory
- http://securitytracker.com/id?1018235 securitytracker.com
- http://www.exploit-db.com/exploits/4065 www.exploit-db.com
- http://www.kb.cert.org/vuls/id/507433 US Government Resource
- http://www.securityfocus.com/archive/1/471947/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24426 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-163A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2153 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34630 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2031 oval.cisecurity.org
- http://osvdb.org/35353 osvdb.org
- http://retrogod.altervista.org/win_speech_2k_sp4.html retrogod.altervista.org
- http://retrogod.altervista.org/win_speech_xp_sp2.html retrogod.altervista.org
- http://secunia.com/advisories/25627 Vendor Advisory
- http://securitytracker.com/id?1018235 securitytracker.com
- http://www.exploit-db.com/exploits/4065 www.exploit-db.com
- http://www.kb.cert.org/vuls/id/507433 US Government Resource
- http://www.securityfocus.com/archive/1/471947/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/24426 www.securityfocus.com
- http://www.us-cert.gov/cas/techalerts/TA07-163A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/2153 Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34630 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2031 oval.cisecurity.org