NVD

Id
53866  
Name
CVE-2007-1684  
Description
The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-05  
Modified Date
2011-03-07  
Seq
2007-1684  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
273104 53866 CVE-2007-1684 VU#556801  View
273105 53866 CVE-2007-1684 23290  View
273106 53866 CVE-2007-1684 1017855  View
273107 53866 CVE-2007-1684 ADV-2007-1216  View
273108 53866 CVE-2007-1684 solidworks-activex-command-execution(33428)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56621 JVNDB-2007-005313 sldimdownload.dll の SolidWorks sldimdownload ActiveX コントロールにおける任意のコマンドを実行される脆弱性 sldimdownload.dll の SolidWorks sldimdownload ActiveX コントロールの Run 関数には、任意のコマンドを実行される脆弱性が存在します。 CVE-2007-1684 25039 CVE-2007-1684 53866 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005313.html 2007-04-05 2012-12-20 View