Path traversal

2007-11-0519:46:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.116 Low

EPSS

Percentile

95.3%

JSON

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.

CPENameOperatorVersion
flowchart_activexle2.3

CPE	Name	Operator	Version
	flowchart_activex	le	2.3

References

osvdb.org/38415

secunia.com/advisories/27462

shinnai.altervista.org/exploits/txt/TXT_3kXDua0a0Tl5Vm5LU3ms.html

www.securityfocus.com/bid/26308

www.vupen.com/english/advisories/2007/3710

exchange.xforce.ibmcloud.com/vulnerabilities/38223

www.exploit-db.com/exploits/4598