Unrated severityNVD Advisory· Published Dec 20, 2007· Updated Jun 16, 2026

CVE-2007-6492

Description

The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via an empty string in the argument to the ProcessRequestEx method.

Affected products

Imesh.com/Imesh2 versions
cpe:2.3:a:imesh.com:imesh:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:imesh.com:imesh:*:*:*:*:*:*:*:*range: <=7.1.0
- (no CPE)range: <=7.1.0.x

Patches

Vulnerability mechanics

References

retrogod.altervista.org/rgod_imesh.htmlnvdExploit
secunia.com/advisories/28134nvdVendor Advisory
osvdb.org/40240nvd
www.securityfocus.com/archive/1/485261/100/0/threadednvd
www.vupen.com/english/advisories/2007/4240nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000