CVE-2007-0942

no score yetEPSS 32%

Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.

EPSS: 32% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
Published: 2007-05-08
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:ie
microsoft:internet_explorer

References

http://secunia.com/advisories/23769
http://www.osvdb.org/34399
http://www.securityfocus.com/archive/1/468871/100/200/threaded
http://www.securitytracker.com/id?1018019
http://www.us-cert.gov/cas/techalerts/TA07-128A.html

Check your stack JSON