CVE-2007-1684 The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarg...
HighCVSS 9.3
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| solidworks sldimdownload activex control | = 16.0.0.5 | No fix listed |
References
- 34320 vdb-entry
- 24762 patch third-party-advisory vendor-advisory
- VU#556801 patch third-party-advisory us-government-resource
- 23290 patch vdb-entry vendor-advisory
- 1017855 vdb-entry vendor-advisory
- ADV-2007-1216 vdb-entry
- solidworks-activex-command-execution(33428) vdb-entry