CVE-2007-3487 in Photo Digital Imaging Activex Control

Summary

Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 06/29/2007
• Disclosure: 06/29/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-37563
• CPE: ready
• CWE: CWE-22 (Confirmed)
• Exploit: Download
• CVSS: 6.5
• EPSS: 0.12211
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-3487
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-3487
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-3487/