CVE-2007-0942

N/A

Published: May 8, 2007 at 11:00 PM UTC

Updated: June 16, 2026 at 10:36 PM UTC

5 products affected across 1 vendorInternet ExplorerWindows XpWindows Vista

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 32%

Description

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Internet Explorer · Microsoft

95%

5.0.1 sp4 6.0 6.0 sp1 7.0

microsoft-windows-2000 (environment) · microsoft-windows-2003-server (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows 2000 · Microsoftdevice

80%

All versions

Windows 2003 Server · Microsoftdevice

80%

All versions

Windows Vista · Microsoftdevice

80%

All versions

Windows Xp · Microsoftdevice

80%

All versions