CVE-2007-1162: Common Controls Replacement Project Browsedialog Server

High severity, CVSS 7.8. EPSS: 3.2% chance of exploitation in the next 30 days.

A certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog Server (ccrpbds6.dll) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long (1) IsFolderAvailable or (2) RootFolder property value, different vectors than CVE-2007-0371.

Affected products

• Common Controls Replacement Project Browsedialog Server: any version

Published 2007-03-02. Last modified 2026-06-16.