VulnerabilityModified
CVE-2007-5322
Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the FoxDoCmd function.
HIGH 7.5EPSS 18.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 18.6%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the FoxDoCmd function.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 18.58% probability · 97th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-78
- Affected
- microsoft/visual foxpro
- Source
- cve@mitre.org
References
- http://osvdb.org/38487
- http://secunia.com/advisories/27165
- http://shinnai.altervista.org/exploits/txt/TXT_14md9AHOoCycrnk9l095.htmlExploit
- http://www.securityfocus.com/bid/25977Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37035
- https://www.exploit-db.com/exploits/4506
- http://osvdb.org/38487
- http://secunia.com/advisories/27165
- http://shinnai.altervista.org/exploits/txt/TXT_14md9AHOoCycrnk9l095.htmlExploit
- http://www.securityfocus.com/bid/25977Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37035
- https://www.exploit-db.com/exploits/4506
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.