CVE-2007-1682 Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to th...
HighCVSS 9.3
EPSS 29.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softartisans xfile | <= 2.3.4 | No fix listed |
| softartisans xfile | = 1.0 | No fix listed |
| softartisans xfile | = 1.0.6 | No fix listed |
| softartisans xfile | = 1.0.7 | No fix listed |
| softartisans xfile | = 1.0.8 | No fix listed |
| softartisans xfile | = 1.1 | No fix listed |
| softartisans xfile | = 1.01 | No fix listed |
| softartisans xfile | = 1.1.1 | No fix listed |
| softartisans xfile | = 1.1.2 | No fix listed |
| softartisans xfile | = 1.1.3 | No fix listed |
| softartisans xfile | = 1.1.4 | No fix listed |
| softartisans xfile | = 1.1.5 | No fix listed |
| softartisans xfile | = 1.1.6 | No fix listed |
| softartisans xfile | = 1.1.7 | No fix listed |
| softartisans xfile | = 2.0 | No fix listed |
| softartisans xfile | = 2.0.2 | No fix listed |
| softartisans xfile | = 2.0.3 | No fix listed |
| softartisans xfile | = 2.1.3 | No fix listed |
| softartisans xfile | = 2.1.4 | No fix listed |
| softartisans xfile | = 2.1.5 | No fix listed |
| softartisans xfile | = 2.1.6 | No fix listed |
| softartisans xfile | = 2.1.7 | No fix listed |
| softartisans xfile | = 2.2.3 | No fix listed |
| softartisans xfile | = 2.2.4 | No fix listed |
References
- 31615 third-party-advisory vendor-advisory
- support.softartisans.com
- VU#914785 third-party-advisory us-government-resource
- 30826 vdb-entry