Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-4105
HistoryJul 31, 2007 - 10:17 a.m.

Remote file inclusion

2007-07-3110:17:00
PRIOn knowledge base
www.prio-n.com
1

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.4%

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing “a link to download and a file to execute,” possibly involving remote file inclusion.

CPENameOperatorVersion
soba_search_bareq5.4

8.3 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.134 Low

EPSS

Percentile

95.4%

Related for PRION:CVE-2007-4105