CVEvulnerability
CVE-2007-1682
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-08-27
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.
Affected configurations
• softartisans xfile (<= 2.3.4)
• softartisans xfile 1.0
• softartisans xfile 1.0.6
• softartisans xfile 1.0.7
• softartisans xfile 1.0.8
• softartisans xfile 1.1
• softartisans xfile 1.01
• softartisans xfile 1.1.1
• softartisans xfile 1.1.2
• softartisans xfile 1.1.3
• softartisans xfile 1.1.4
• softartisans xfile 1.1.5
• softartisans xfile 1.1.6
• softartisans xfile 1.1.7
• softartisans xfile 2.0
• softartisans xfile 2.0.2
• softartisans xfile 2.0.3
• softartisans xfile 2.1.3
• softartisans xfile 2.1.4
• softartisans xfile 2.1.5
• softartisans xfile 2.1.6
• softartisans xfile 2.1.7
• softartisans xfile 2.2.3
• softartisans xfile 2.2.4
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/31615 Vendor Advisory
- http://support.softartisans.com/Support-114.aspx support.softartisans.com
- http://www.kb.cert.org/vuls/id/914785 US Government Resource
- http://www.securityfocus.com/bid/30826 www.securityfocus.com
- http://secunia.com/advisories/31615 Vendor Advisory
- http://support.softartisans.com/Support-114.aspx support.softartisans.com
- http://www.kb.cert.org/vuls/id/914785 US Government Resource
- http://www.securityfocus.com/bid/30826 www.securityfocus.com