CVE-2007-5219

28Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 16%

exploitation probability

16%top 3% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4479unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/37725 http://secunia.com/advisories/27039 https://exchange.xforce.ibmcloud.com/vulnerabilities/36902 https://www.exploit-db.com/exploits/4479 http://www.securityfocus.com/bid/25888 http://www.securitytracker.com/id?1018758 http://www.vupen.com/english/advisories/2007/3328