Lucene search

K
cve[email protected]CVE-2007-6492
HistoryDec 20, 2007 - 8:46 p.m.

CVE-2007-6492

2007-12-2020:46:00
CWE-20
web.nvd.nist.gov
17
cve-2007-6492
imweb.dll
imwebcontrol.dll
imesh 7.1.0.x
activex control
denial of service

7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.009 Low

EPSS

Percentile

82.8%

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via an empty string in the argument to the ProcessRequestEx method.

CPENameOperatorVersion
imesh.com:imeshimesh.com imeshle7.1.0

7 High

AI Score

Confidence

High

7.1 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:N/A:C

0.009 Low

EPSS

Percentile

82.8%

Related for CVE-2007-6492