medium6.4Public exploit code
CVE-2007-4902
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to writ…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ultra Crypto Component - 'CryptoX.dll 2.0 SaveToFile()' Insecure Method2007-09-10 · remote · windows · Verified
Impact
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ultra Shareware | Ultra Crypto Component | Version 2.0.2007.801 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/38982
- http://www.securityfocus.com/bid/25611
- http://www.securitytracker.com/id?1018675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36522
- https://www.exploit-db.com/exploits/4388
- http://osvdb.org/38982
- http://www.securityfocus.com/bid/25611
- http://www.securitytracker.com/id?1018675
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36522
- https://www.exploit-db.com/exploits/4388