CVE-2007-2929

2007-08-1519:17:00

[email protected]

web.nvd.nist.gov

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.016

Percentile

87.6%

JSON

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code onto a client system and execute this code.

Affected configurations

Nvd

Node

lenovoaccess_support

lenovoautomated_solutionsMatch1.0

VendorProductVersionCPE
lenovoaccess_support*cpe:2.3:h:lenovo:access_support:*:*:*:*:*:*:*:*
lenovoautomated_solutions1.0cpe:2.3:h:lenovo:automated_solutions:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
lenovo	access_support	*	cpe:2.3:h:lenovo:access_support::::::::
lenovo	automated_solutions	1.0	cpe:2.3:h:lenovo:automated_solutions:1.0:::::::*