CVE-2007-2222

critical Microsoft
CVSS v3 Base Score
9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
EPSS Score
63.6%
Exploitation probability in 30 days
Top 2% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
M
Confidentiality
C
Integrity
C
Availability
C
Published: June 12, 2007 (6910 days ago)
Last Modified: April 23, 2026
Vendor: Microsoft
Source: NVD

Description

Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.

CWE

CWE-119

Affected Products

microsoft internet explorer

References

🔗 osvdb.org 🔗 retrogod.altervista.org 🔗 retrogod.altervista.org 🔗 secunia.com 🔗 securitytracker.com