CVE-2007-0356: Common Controls Replacement Project Foldertreeview Activex Control

Medium severity, CVSS 5.0. EPSS: 17.6% chance of exploitation in the next 30 days.

The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value.

Affected products

• Common Controls Replacement Project Foldertreeview Activex Control: any version
• Microsoft Ie: version 7.0 only

Published 2007-01-19. Last modified 2026-06-16.