Microsoft: >> System Information Activex Control Security Vulnerabilities
System Information ActiveX control (msinfo.dll), when accessed via Microsoft Internet Explorer, allows remote attackers to cause a denial of service (crash) via a SaveFile function with a long (1) computer and possibly (2) filename and (3) category argument.
CVSS Score
5.0
EPSS Score
0.185
Published
2006-09-07