CVEvulnerability
CVE-2007-5320
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-10-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:H/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-22
Description
Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control (PegasusImaging.ActiveX.ThumnailXpress1.dll) or (2) overwrite arbitrary files via the CompactFile function in the ImagXpress.8 ActiveX control (PegasusImaging.ActiveX.ImagXpress8.dll).
Affected configurations
• pegasus imaging imagxpress 8.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/37959 osvdb.org
- http://osvdb.org/37960 osvdb.org
- http://secunia.com/advisories/27095 Vendor Advisory
- http://shinnai.altervista.org/exploits/txt/TXT_3DQ1nIkI6zmWCek4zP5U.html Exploit
- http://shinnai.altervista.org/exploits/txt/TXT_wfv7ZG0G6KnQlk1SieLd.html Exploit
- http://www.securityfocus.com/bid/25948 Exploit
- http://www.securityfocus.com/bid/25949 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3388 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37012 exchange.xforce.ibmcloud.com
- http://osvdb.org/37959 osvdb.org
- http://osvdb.org/37960 osvdb.org
- http://secunia.com/advisories/27095 Vendor Advisory
- http://shinnai.altervista.org/exploits/txt/TXT_3DQ1nIkI6zmWCek4zP5U.html Exploit
- http://shinnai.altervista.org/exploits/txt/TXT_wfv7ZG0G6KnQlk1SieLd.html Exploit
- http://www.securityfocus.com/bid/25948 Exploit
- http://www.securityfocus.com/bid/25949 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3388 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/37012 exchange.xforce.ibmcloud.com