CVE-2007-4105 A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly i...
HighCVSS 9.3
EPSS 7.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| baidu soba search bar | = 5.4 | No fix listed |
References
- 26256 third-party-advisory vendor-advisory
- www.fortiguardcenter.com patch vendor-advisory
- 20070802 Baidu Soba Remote Code Execute Vulnerability(FGA-2007-10) mailing-list
- 25121 vdb-entry
- ADV-2007-2699 vdb-entry
- baidu-baidubar-code-execution(35692) vdb-entry