The SmartConnect Class control allows remote attackers to cause a denial of service (Internet Explorer crash) by creating a COM object of the class associated with the controls CLSID, which is not intended for use within Internet Explorer.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Internet_explorer | Microsoft | 7.0 (including) | 7.0 (including) |