high7.5Public exploit code
CVE-2007-2725
The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DeWizardX - 'DEWizardAX.ocx' Arbitrary File Overwrite2007-05-15 · remote · windows · Verified
Impact
The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary files via the SaveToFile function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Db Soft Lab | Dewizardx | All versions |
References
- NVD record
- CVE.org record
- http://moaxb.blogspot.com/2007/05/moaxb-15-db-software-laboratory.html
- http://osvdb.org/36023
- http://shinnai.altervista.org/viewtopic.php?id=42&t_id=17
- http://www.securityfocus.com/bid/23986
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34304
- http://moaxb.blogspot.com/2007/05/moaxb-15-db-software-laboratory.html
- http://osvdb.org/36023
- http://shinnai.altervista.org/viewtopic.php?id=42&t_id=17
- http://www.securityfocus.com/bid/23986
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34304