CVE

Id
25597  
CVE No.
CVE-2007-2240  
Status
Candidate  
Description
The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), does not properly validate digital signatures of downloaded software, which makes it easier for remote attackers to spoof a download.  
Phase
Assigned (20070425)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255755 25597 CVE-2007-2240 CONFIRM:http://www-307.ibm.com/pc/support/site.wss/document.do?sitestyle=lenovo&lndocid=MIGR-67649  View
255756 25597 CVE-2007-2240 MS:MS07-045  View
255757 25597 CVE-2007-2240 URL:http://www.microsoft.com/technet/security/bulletin/ms07-045.mspx  View
255758 25597 CVE-2007-2240 CERT-VN:VU#570705  View
255759 25597 CVE-2007-2240 URL:http://www.kb.cert.org/vuls/id/570705  View
255760 25597 CVE-2007-2240 BID:25311  View
255761 25597 CVE-2007-2240 URL:http://www.securityfocus.com/bid/25311  View
255762 25597 CVE-2007-2240 VUPEN:ADV-2007-2882  View
255763 25597 CVE-2007-2240 URL:http://www.vupen.com/english/advisories/2007/2882  View
255764 25597 CVE-2007-2240 OSVDB:39555  View
255765 25597 CVE-2007-2240 URL:http://osvdb.org/39555  View
255766 25597 CVE-2007-2240 SECUNIA:26482  View
255767 25597 CVE-2007-2240 URL:http://secunia.com/advisories/26482  View
255768 25597 CVE-2007-2240 XF:ibm-lenovo-acprunner-code-execution(36028)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51724 JVNDB-2007-000387 IPv6 Type0 ルーティングヘッダの問題 IPv6 Type 0 ルーティングヘッダには、サービス運用妨害 (DoS) の問題が存在します。 CVE-2007-2242 25597 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000387.html  View