6.8med
CVE-2007-48911 exploit
A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) Syn…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
6.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
31.0%
percentile 98%
Public exploits
1
Exploit-DB
Summary
A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.
Exploit prediction (EPSS)
31.00% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- EDB-4393 Microsoft Visual Studio 6.0 - 'PDWizard.ocx' Remote Command Execution · remote · 2007-09-11
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
References
- exchange.xforce.ibmcloud.com /vulnerabilities/36572 · vdb-entry, x_refsource_XF, x_transferred
- exploit-db.com /exploits/4393 · exploit, x_refsource_EXPLOIT-DB, x_transferred
- shinnai.altervista.org /exploits/txt/TXT_AZJ5bXwXvMARqwtfe97I.html · x_refsource_MISC, x_transferred
- osvdb.org /37106 · vdb-entry, x_refsource_OSVDB, x_transferred
- secunia.com /advisories/26779 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- securityfocus.com /bid/25638 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2007-4891
- NVD: CVE-2007-4891
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.