5.0med
CVE-2007-39831 exploit
Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX control in arpro2.dll in…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.6%
percentile 76%
Public exploits
1
Exploit-DB
Summary
Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX control in arpro2.dll in ActiveReports 2.0 Professional Edition 2.5.0.1308 (SP5 RC) allows remote attackers to create or overwrite arbitrary files via a full pathname in an argument to the SaveLayout method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit prediction (EPSS)
1.63% probability of exploitation in the next 30 days, higher than 76% of all scored CVEs.
Exploits and detections
- EDB-4208 Data Dynamics ActiveReport - ActiveX 'actrpt2.dll 2.5' Insecure Method · remote · 2007-07-21
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:P/A:N |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/36056 · vdb-entry, x_refsource_XF, x_transferred
- secunia.com /advisories/26112 · third-party-advisory, x_refsource_SECUNIA, x_transferred
Sources
- CVE List: CVE-2007-3983
- NVD: CVE-2007-3983
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.