Lucene search

K
prionPRIOn knowledge basePRION:CVE-2007-5017
HistorySep 20, 2007 - 9:17 p.m.

Path traversal

2007-09-2021:17:00
PRIOn knowledge base
www.prio-n.com
3

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.038 Low

EPSS

Percentile

91.6%

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method.

CPENameOperatorVersion
messengereq8.1.0.421

7.3 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.038 Low

EPSS

Percentile

91.6%

Related for PRION:CVE-2007-5017