CVE-2007-2222

CVE-2007-2222 describes multiple buffer overflow vulnerabilities in Microsoft Internet Explorer versions 5.01, 6, and 7, specifically within the ActiveListen and ActiveVoice speech controls. A remote attacker can exploit these flaws by crafting a malicious ActiveX object, leading to memory corruption and arbitrary code execution on affected systems, including various Windows operating systems. With a CVSS score of 9.3, this vulnerability is considered critical due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. While not on the CISA KEV catalog or actively discussed on social media, public exploit code exists for Windows 2000 SP4 and Windows XP SP2, indicating a potential for exploitation.