Lucene search

K
cve[email protected]CVE-2007-4890
HistorySep 14, 2007 - 1:17 a.m.

CVE-2007-4890

2007-09-1401:17:00
CWE-22
web.nvd.nist.gov
23
cve-2007-4890
directory traversal
activex
vb to vsi support library
vulnerability
remote attackers
microsoft visual studio 6.0

7.5 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.023 Low

EPSS

Percentile

89.5%

Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can be copied from local files via the Load method.

7.5 High

AI Score

Confidence

Low

5.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

0.023 Low

EPSS

Percentile

89.5%

Related for CVE-2007-4890