CVE-2007-3883 The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in (1) the second argument to the Save method, or the...
MediumCVSS 5.1
EPSS 8.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pathname in (1) the second argument to the Save method, or the first argument to the (2) SaveLayoutChanges or (3) SaveMenuUsageData method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| datadynamics activebar | <= 3.1 | No fix listed |