CVE-2007-4902 Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname....
MediumCVSS 6.4
EPSS 5.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ultra shareware ultra crypto component | = 2.0.2007.801 | No fix listed |
References
- 38982 vdb-entry
- 25611 exploit vdb-entry
- 1018675 vdb-entry
- ultracrypto-cryptox-file-overwrite(36522) vdb-entry
- 4388 exploit