medium6.4Public exploit code
CVE-2007-3487
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- HP Digital Imaging 'hpqxml.dll 2.0.0.133' - Arbitrary Data Write2007-06-27 · remote · windows · Verified
Impact
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hp | Photo Digital Imaging Activex Control | Version 2.0.0.133 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/37675
- http://secunia.com/advisories/25869
- http://securityreason.com/securityalert/2846
- http://www.securityfocus.com/archive/1/472384/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35124
- https://www.exploit-db.com/exploits/4119
- http://osvdb.org/37675
- http://secunia.com/advisories/25869
- http://securityreason.com/securityalert/2846
- http://www.securityfocus.com/archive/1/472384/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35124
- https://www.exploit-db.com/exploits/4119