Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
BID:24659
Info
Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 24659 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3459 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 26 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | The GOODFELLAS Security Research TEAM is credited with the discovery of this vulnerability. |
| Vulnerable: |
Avax Avax Vector software - Avaxswf.dll 1.0.0.1 |
| Not Vulnerable: | |
Discussion
Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
The Avax Vector ActiveX control is prone to a vulnerability that could permit an attacker to overwrite arbitrary files.
The attacker can exploit this issue to overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
Avax Vector ActiveX v.1.3 is vulnerable.
The Avax Vector ActiveX control is prone to a vulnerability that could permit an attacker to overwrite arbitrary files.
The attacker can exploit this issue to overwrite arbitrary files on the victim's computer in the context of the vulnerable application using the ActiveX control (typically Internet Explorer).
Avax Vector ActiveX v.1.3 is vulnerable.
Exploit / POC
Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
The following proof-of-concept exploit is available:
The following proof-of-concept exploit is available:
Solution / Fix
Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Avax Vector AvaxSWF.DLL ActiveX Control Arbitrary File Overwrite Vulnerability
References:
References: