CVE-2007-3459 A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method...
MediumCVSS 6.4
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| civiltech avax vector activex | = 1.3 | No fix listed |
References
- 38037 vdb-entry
- 2844 third-party-advisory
- 20070626 [GOODFELLAS - VULN ] Avaxswf.dll v.1.0.0.1 from Avax Vectorsoftware ActiveX Arbitrary Data Write mailing-list
- 24659 vdb-entry
- avax-writemovie-file-overwrite(35089) vdb-entry
- 4110 exploit