CVE-2007-5219 Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or o...
MediumCVSS 6.4
EPSS 15.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cyberlink powerdvd | = 7.0 | No fix listed |
References
- 37725 vdb-entry
- 27039 third-party-advisory vendor-advisory
- 25888 exploit vdb-entry
- 1018758 vdb-entry
- ADV-2007-3328 vdb-entry
- cyberlink-clsetting-file-overwrite(36902) vdb-entry
- 4479 exploit