CVE-2007-2216

The record

The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability."

Affected packages

Related vulnerabilities

• CVE-2026-4433 An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of… CWE-16
• CVE-2013-1451 Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same… CWE-16
• CVE-2011-2730 VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before… CWE-16
• CVE-2012-5613 MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other… CWE-16
• CVE-2012-0147 Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not… CWE-16
• CVE-2011-4404 The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware… CWE-16
• CVE-2011-1652 The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and… CWE-16
• CVE-2009-0696 The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5… CWE-16