A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP_BDc.SelectedFolder property value.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Browsedialog_server | Common_controls_replacement_project | * | * |