CVE-2007-1682
high · 9.3Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
9.3
CVSS
29.6%
EPSS (exploit prob.)
98th
EPSS percentile
2008-08-27
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| softartisans | xfile | <= 2.3.4 |
| softartisans | xfile | 1.0 |
| softartisans | xfile | 1.0.6 |
| softartisans | xfile | 1.0.7 |
| softartisans | xfile | 1.0.8 |
| softartisans | xfile | 1.1 |
| softartisans | xfile | 1.01 |
| softartisans | xfile | 1.1.1 |
| softartisans | xfile | 1.1.2 |
| softartisans | xfile | 1.1.3 |
| softartisans | xfile | 1.1.4 |
| softartisans | xfile | 1.1.5 |
| softartisans | xfile | 1.1.6 |
| softartisans | xfile | 1.1.7 |
| softartisans | xfile | 2.0 |
| softartisans | xfile | 2.0.2 |
| softartisans | xfile | 2.0.3 |
| softartisans | xfile | 2.1.3 |
| softartisans | xfile | 2.1.4 |
| softartisans | xfile | 2.1.5 |
| softartisans | xfile | 2.1.6 |
| softartisans | xfile | 2.1.7 |
| softartisans | xfile | 2.2.3 |
| softartisans | xfile | 2.2.4 |
Check a specific version with /api/v1/cve/match.
References
- http://secunia.com/advisories/31615
- http://support.softartisans.com/Support-114.aspx
- http://www.kb.cert.org/vuls/id/914785
- http://www.securityfocus.com/bid/30826
- http://secunia.com/advisories/31615
- http://support.softartisans.com/Support-114.aspx
- http://www.kb.cert.org/vuls/id/914785
- http://www.securityfocus.com/bid/30826
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2007-1682