CVE-2007-5320 Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX cont...
MediumCVSS 4.0
EPSS 6.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control (PegasusImaging.ActiveX.ThumnailXpress1.dll) or (2) overwrite arbitrary files via the CompactFile function in the ImagXpress.8 ActiveX control (PegasusImaging.ActiveX.ImagXpress8.dll).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pegasus imaging imagxpress | = 8.0 | No fix listed |
References
- 37959 vdb-entry
- 37960 vdb-entry
- 27095 third-party-advisory vendor-advisory
- shinnai.altervista.org exploit
- shinnai.altervista.org exploit
- 25948 exploit vdb-entry
- 25949 vdb-entry
- ADV-2007-3388 vdb-entry
- imagxpress-imagxpress8-file-overwrite(37012) vdb-entry