Lucene search

[email protected]CVE-2007-4252

HistoryAug 08, 2007 - 11:17 p.m.

CVE-2007-4252

2007-08-0823:17:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-4252

activex control

path traversal

remote code execution

security vulnerability

nvd

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.017 Low

EPSS

Percentile

87.6%

JSON

Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633.

CPENameOperatorVersion
chilkat_software:asp_stringchilkat software asp stringeq1.1

CPE	Name	Operator	Version
chilkat_software:asp_string	chilkat software asp string	eq	1.1

References

osvdb.org/40110

www.securityfocus.com/bid/25205

exchange.xforce.ibmcloud.com/vulnerabilities/35812

www.exploit-db.com/exploits/4255

7 High

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.017 Low

EPSS

Percentile

87.6%

JSON

Related for CVE-2007-4252

prion2 cve1