CVE-2007-2222

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 54.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-06-12 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption, as demonstrated via the ModeName parameter to the FindEngine function in ACTIVEVOICEPROJECTLib.DirectSS.

Affected products

Microsoft Internet Explorer 11: 5.01-sp4, 6-sp1, 6, 7.0

References

http://osvdb.org/35353
http://retrogod.altervista.org/win_speech_2k_sp4.html
http://retrogod.altervista.org/win_speech_xp_sp2.html
http://secunia.com/advisories/25627
http://securitytracker.com/id?1018235
http://www.exploit-db.com/exploits/4065
http://www.kb.cert.org/vuls/id/507433
http://www.securityfocus.com/archive/1/471947/100/0/threaded
http://www.securityfocus.com/bid/24426
http://www.us-cert.gov/cas/techalerts/TA07-163A.html
http://www.vupen.com/english/advisories/2007/2153
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-033

Get alerted when CVE-2007-2222 or the next vulnerability affects your stack