Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

CVE-2007-2623: Remote Display Dev kit can crash Internet Explorer 7

CVE-2007-2623 · published 19 years ago
Summary

The Remote Display Development Kit version 1.2.1.0 contains a flaw in its RControl.dll file that lets specially crafted data cause Internet Explorer 7 to stop working. An attacker could send a long command or property value that forces the browser to crash, denying users access to web services. Apply the vendor’s patch or stop using the kit until it is updated to prevent the crash.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
fruit2004 remote_display_development_kit 1.2.10
cpe:2.3:a:fruit2004:remote_display_development_kit:1.2.10:*:*:*:*:*:*:*
Original advisory text
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via (1) a long first argument to the conn...
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via (1) a long first argument to the connect function or (2) a long InternalServer property value, possibly involving ntdll.dll.
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.8 High
Exploitation
4% chance of attack within 30 days
Timeline
Published11 May 2007
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-2623 · NVD
Track software like this
Free during beta