CVE-2007-3883

EPSS 8.2%

The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in (1) the second argument to the Save method, or the first argument to the (2) SaveLayoutChanges or (3) SaveMenuUsageData method.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/5395unverified cve_referencewww.exploit-db.com/exploits/4190unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37692 http://secunia.com/advisories/26098 https://exchange.xforce.ibmcloud.com/vulnerabilities/35471 https://www.exploit-db.com/exploits/4190 https://www.exploit-db.com/exploits/5395 http://www.securityfocus.com/bid/24959