CVE-2007-4252 Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathn...
MediumCVSS 4.3
EPSS 1.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in a certain ActiveX control in CkString.dll 1.1 and earlier in CHILKAT ASP String allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveToFile method, a different vulnerability than CVE-2007-3633.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chilkat software asp string | = 1.1 | No fix listed |
References
- 40110 vdb-entry
- 25205 vdb-entry
- chilkataspstring-savetofile-code-execution(35812) vdb-entry
- 4255 exploit