CVE-2007-6492

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via an empty string in the argument to the ProcessRequestEx method.

CVSS v2.0

7.1 HIGHAV:N/AC:M/Au:N/C:N/I:N/A:C

EPSS

1.52% chance of exploitation in the next 30 days, 73th percentile

Published

2007-12-20

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/485261/100/0/threaded

References

• CVE Record
• NVD entry

Related

• CVE-2007-6490
• CVE-2007-6493
• CVE-2007-6489
• CVE-2007-6494
• CVE-2007-6488
• CVE-2007-6495