CVE-2007-4751 RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files.
LowCVSS 1.9
EPSS 0.30%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensitive information by reading the temporary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| data-vision remotedocs r-viewer | <= 1.6.2836 | No fix listed |
References
- 26835 third-party-advisory
- 3150 third-party-advisory
- 1018703 vdb-entry
- 20070917 SYMSA-2007-009: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure mailing-list
- 25591 vdb-entry
- www.symantec.com
- ADV-2007-3199 vdb-entry
- remotedocs-directories-info-disclosure(36654) vdb-entry