CVE-2007-5219

EPSS 15.7%

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4479unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/37725 http://secunia.com/advisories/27039 https://exchange.xforce.ibmcloud.com/vulnerabilities/36902 https://www.exploit-db.com/exploits/4479 http://www.securityfocus.com/bid/25888 http://www.securitytracker.com/id?1018758 http://www.vupen.com/english/advisories/2007/3328