The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Foldertreeview_activex_control | Common_controls_replacement_project | * | * |
| Ie | Microsoft | 7.0 (including) | 7.0 (including) |