Lucene search

K
cve[email protected]CVE-2007-2755
HistoryMay 17, 2007 - 11:30 p.m.

CVE-2007-2755

2007-05-1723:30:00
NVD-CWE-Other
web.nvd.nist.gov
17
precisionid barcode
activex control
remote attackers
overwrite files
vulnerability

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.069 Low

EPSS

Percentile

93.9%

The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744.

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.069 Low

EPSS

Percentile

93.9%

Related for CVE-2007-2755