Lucene search

K
cve[email protected]CVE-2007-4105
HistoryJul 31, 2007 - 10:17 a.m.

CVE-2007-4105

2007-07-3110:17:00
NVD-CWE-Other
web.nvd.nist.gov
19
baidu soba search bar
activex control
remote code execution
cve-2007-4105
security vulnerability

8.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.126 Low

EPSS

Percentile

95.4%

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing “a link to download and a file to execute,” possibly involving remote file inclusion.

8.5 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.126 Low

EPSS

Percentile

95.4%

Related for CVE-2007-4105