Microsoft CAPICOM Certificates ActiveX Control Code Execution (MS07-028; CVE-2007-0940)

CAPICOM Certificates CAPICOM.dll is an ActiveX control that provides a method for encrypting data based on secure underlying Windows CryptoAPI functionality.A remote code execution vulnerability has been reported in Cryptographic API Component Object Model CAPICOM Certificates.A remote attacker...

CVE-2007-0940

CVE-2007-0940 describes a remote code execution vulnerability in the CAPICOM Certificates ActiveX control (CAPICOM.dll) used by Microsoft CAPICOM and BizTalk Server 2004 SP1/SP2. The flaw arises from how CAPICOM.Certificates validates inputs, enabling an attacker who entices a user to visit a cra...