The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value.Referenceshttp://www.securityfocus.com/bid/22092https://www.exploit-db.com/exploits/3142https://exchange.xforce.ibmcloud.com/vulnerabilities/31549