CVE-2007-2928

2007-08-1519:17:00

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.134

Percentile

95.6%

JSON

Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), allows remote attackers to execute arbitrary code via format string specifiers in unknown data.

Affected configurations

Nvd

Node

lenovoaccess_support

lenovoautomated_solutionsMatch1.0

VendorProductVersionCPE
lenovoaccess_support*cpe:2.3:h:lenovo:access_support:*:*:*:*:*:*:*:*
lenovoautomated_solutions1.0cpe:2.3:h:lenovo:automated_solutions:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lenovo	access_support	*	cpe:2.3:h:lenovo:access_support::::::::
lenovo	automated_solutions	1.0	cpe:2.3:h:lenovo:automated_solutions:1.0:::::::*