CVEvulnerability
CVE-2007-2929
5.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-08-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.8 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:P
Description
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code onto a client system and execute this code.
Affected configurations
• lenovo access support
• lenovo automated solutions 1.0
References
- http://secunia.com/advisories/26482 secunia.com
- http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649 www-307.ibm.com
- http://www.kb.cert.org/vuls/id/426737 US Government Resource
- http://www.securityfocus.com/bid/25311 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2882 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36035 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/26482 secunia.com
- http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649 www-307.ibm.com
- http://www.kb.cert.org/vuls/id/426737 US Government Resource
- http://www.securityfocus.com/bid/25311 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2882 www.vupen.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-045 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36035 exchange.xforce.ibmcloud.com