CVE-2007-4890
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can be copied from local files via the Load method.
- Affected products
- Visual Studio
- Microsoft Visual Studio
- = 6.0
- Fix
- Available
- CVSS 2.0
- 5.8 MEDIUM
- EPSS
- 16.4% (97th percentile)
- Weakness
- CWE-22
- NVD status
- Modified
- Published
- 2007-09-14
CVE-2007-4890 at NVD
1 known exploit for CVE-2007-4890
Proof-of-concept code and exploit modules indexed by Sploitus