← back
CVE-2007-5826

CVE-2007-5826

EPSS 3.7%
Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/4598unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/38415http://secunia.com/advisories/27462https://exchange.xforce.ibmcloud.com/vulnerabilities/38223http://shinnai.altervista.org/exploits/txt/TXT_3kXDua0a0Tl5Vm5LU3ms.htmlhttps://www.exploit-db.com/exploits/4598http://www.securityfocus.com/bid/26308http://www.vupen.com/english/advisories/2007/3710