Lucene search

K
cveMitreCVE-2007-3649
HistoryJul 10, 2007 - 5:30 p.m.

CVE-2007-3649

2007-07-1017:30:00
mitre
web.nvd.nist.gov
29
cve-2007-3649
absolute path traversal
hpqvwocx.dll
remote attack
arbitrary files
nvd
activex control
digital imaging

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.058

Percentile

93.4%

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method.

Affected configurations

Nvd
Node
hpphoto_digital_imaging_activex_controlMatch2.1.0.556
VendorProductVersionCPE
hpphoto_digital_imaging_activex_control2.1.0.556cpe:2.3:a:hp:photo_digital_imaging_activex_control:2.1.0.556:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

High

EPSS

0.058

Percentile

93.4%

Related for CVE-2007-3649