CVE-2007-6493 The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to t...
HighCVSS 10.0
EPSS 6.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to execute arbitrary code via a certain argument to the SetHandler method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imesh.com imesh | <= 7.1.0.37263 | No fix listed |
References
- 40239 vdb-entry
- retrogod.altervista.org exploit
- 28134 third-party-advisory vendor-advisory
- 20071218 iMesh <= 7.1.0.x IMWebControl Class (IMWeb.dll 7.0.0.x) remote exploit mailing-list
- ADV-2007-4240 vdb-entry