CVE-2007-5826
CVSS V2 High 9.3
CVSS V3 None
Description
Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.
Overview
- CVE ID
- CVE-2007-5826
- Assigner
- cve@mitre.org
- Vulnerability Status
- Modified
- Published Version
- 2007-11-05T19:46:00
- Last Modified Date
- 2017-09-29T01:29:43
Weakness Enumerations
CPE Configuration (Product)
| CPE | Vulnerable | Operator | Version Start | Version End |
|---|---|---|---|---|
| cpe:2.3:a:edraw:flowchart_activex:*:*:*:*:*:*:*:* | 1 | OR | 2.3 |
CVSS Version 2
- Version
- 2.0
- Vector String
- AV:N/AC:M/Au:N/C:C/I:C/A:C
- Access Vector
- NETWORK
- Access Compatibility
- MEDIUM
- Authentication
- NONE
- Confidentiality Impact
- COMPLETE
- Integrity Impact
- COMPLETE
- Availability Impact
- COMPLETE
- Base Score
- 9.3
- Severity
- HIGH
- Exploitability Score
- 8.6
- Impact Score
- 10
References
Sources
| Source Name | Source URL |
|---|---|
| NIST | https://nvd.nist.gov/vuln/detail/CVE-2007-5826 |
| MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5826 |
History
| Created | Old Value | New Value | Data Type | Notes |
|---|---|---|---|---|
| 2022-05-10 08:27:08 | Added to TrackCVE |