CVE-2007-5826

Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create or overwrite arbitrary files with arbitrary contents via a full pathname in the second argument to the HttpDownloadFile method, a different product than CVE-2007-4420.

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

3.68% chance of exploitation in the next 30 days, 89th percentile

Published

2007-11-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4598

References

• CVE Record
• NVD entry

Related

• CVE-2007-5824
• CVE-2007-5837
• CVE-2007-5823
• CVE-2007-5840
• CVE-2007-5822
• CVE-2007-5841