CVE-2007-1684

Impact

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

Affected products

References

• NVD record
• CVE.org record
• http://osvdb.org/34320
• http://secunia.com/advisories/24762
• http://www.kb.cert.org/vuls/id/556801
• http://www.securityfocus.com/bid/23290
• http://www.securitytracker.com/id?1017855
• http://www.vupen.com/english/advisories/2007/1216
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33428
• http://osvdb.org/34320
• http://secunia.com/advisories/24762
• http://www.kb.cert.org/vuls/id/556801
• http://www.securityfocus.com/bid/23290
• http://www.securitytracker.com/id?1017855
• http://www.vupen.com/english/advisories/2007/1216
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33428