Description
Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and possibly 7 on Windows Vista does not properly "instantiate certain COM objects as ActiveX controls," which allows remote attackers to execute arbitrary code via a crafted COM object from chtskdic.dll.
References
- oval:org.mitre.oval:def:1939 vdb-entry signature
- HPSBST02214 vendor-advisory
- ADV-2007-1712 vdb-entry
- 34399 vdb-entry
- ie-chtskdic-com-code-execution(33252) vdb-entry
- 1018019 vdb-entry
- MS07-027 vendor-advisory
- 23769 third-party-advisory
- TA07-128A third-party-advisory