high7.8Public exploit code
CVE-2007-3076
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zenturi ProgramChecker - ActiveX File Download/Overwrite2007-05-30 · remote · windows · Verified
Impact
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenturi | Zenturi Programchecker | All versions |
References
- NVD record
- CVE.org record
- http://moaxb.blogspot.com/2007/05/moaxb-30-zenturi-programchecker-activex.html
- http://osvdb.org/36046
- http://secunia.com/advisories/25468
- http://www.securityfocus.com/bid/24377
- http://www.vupen.com/english/advisories/2007/2000
- http://moaxb.blogspot.com/2007/05/moaxb-30-zenturi-programchecker-activex.html
- http://osvdb.org/36046
- http://secunia.com/advisories/25468
- http://www.securityfocus.com/bid/24377
- http://www.vupen.com/english/advisories/2007/2000