CVE-2007-1682

2008-08-2720:41:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2007-1682

stack-based buffer overflow

filemanager activex

safmgpws.dll

softartisans xfile

remote code execution

nvd

8 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.519 Medium

EPSS

Percentile

97.6%

JSON

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.

CPENameOperatorVersion
softartisans:xfilesoftartisans xfileeq1.0.8
softartisans:xfilesoftartisans xfileeq1.1.5
softartisans:xfilesoftartisans xfileeq2.2.4
softartisans:xfilesoftartisans xfileeq1.0
softartisans:xfilesoftartisans xfileeq1.1.1
softartisans:xfilesoftartisans xfileeq1.1.6
softartisans:xfilesoftartisans xfileeq2.0.3
softartisans:xfilesoftartisans xfileeq2.1.5
softartisans:xfilesoftartisans xfileeq2.1.6
softartisans:xfilesoftartisans xfileeq1.0.6

CPE	Name	Operator	Version
softartisans:xfile	softartisans xfile	eq	1.0.8
softartisans:xfile	softartisans xfile	eq	1.1.5
softartisans:xfile	softartisans xfile	eq	2.2.4
softartisans:xfile	softartisans xfile	eq	1.0
softartisans:xfile	softartisans xfile	eq	1.1.1
softartisans:xfile	softartisans xfile	eq	1.1.6
softartisans:xfile	softartisans xfile	eq	2.0.3
softartisans:xfile	softartisans xfile	eq	2.1.5
softartisans:xfile	softartisans xfile	eq	2.1.6
softartisans:xfile	softartisans xfile	eq	1.0.6