CVE-2007-0371: Common Controls Replacement Project Browsedialog Server

Medium severity, CVSS 4.3. EPSS: 2.3% chance of exploitation in the next 30 days.

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP_BDc.SelectedFolder property value.

Affected products

• Common Controls Replacement Project Browsedialog Server: any version

Published 2007-01-19. Last modified 2026-06-16.