VulnerabilityModified
CVE-2007-3982
Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll 2.5 and earlier allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the…
MEDIUM 5.0EPSS 2.49%
Does this matter?
Lower severity and a low EPSS score (2.49%). Track it; it rarely justifies an emergency change on its own.
Description
Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll 2.5 and earlier allows remote attackers to create or overwrite arbitrary files via a full pathname in the first argument to the SaveLayout method.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.49% probability · 84th percentile
- CISA KEV
- Not listed
- Affected
- datadynamics/activereports
- Source
- cve@mitre.org
References
- http://osvdb.org/37694
- http://secunia.com/advisories/26112Vendor Advisory
- http://www.securityfocus.com/bid/24994Exploit
- http://www.vupen.com/english/advisories/2007/2606
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35539
- https://www.exploit-db.com/exploits/4208
- http://osvdb.org/37694
- http://secunia.com/advisories/26112Vendor Advisory
- http://www.securityfocus.com/bid/24994Exploit
- http://www.vupen.com/english/advisories/2007/2606
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35539
- https://www.exploit-db.com/exploits/4208
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.