CVE-2007-3487 Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argume...
MediumCVSS 6.4
EPSS 8.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc photo digital imaging activex control | = 2.0.0.133 | No fix listed |
References
- 37675 vdb-entry
- 25869 third-party-advisory vendor-advisory
- 2846 third-party-advisory
- 20070627 [GOODFELLAS - VULN] hpqxml.dll 2.0.0.133 from HP Digital ImagingArbitary Data Write. mailing-list
- hp-photodigitalimaging-hpqxml-file-overwrite(35124) vdb-entry
- 4119 exploit