CVE-2007-1684 in sldimdownload ActiveX control

Summary

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 03/26/2007
• Disclosure: 04/05/2007
• Moderation: VulDB entry created
• Entries: 1
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 9.8
• EPSS: 0.02272
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-1684
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-1684
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-1684/