NVD

Id
55977  
Name
CVE-2007-3833  
Description
The AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote attackers to create files with arbitrary contents via certain aim: URIs, as demonstrated by a URI that begins with the "aim: &c:" substring and contains a full pathname in the ini field. NOTE: this can be leveraged for code execution by writing to a Startup folder.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-07-17  
Modified Date
2011-03-07  
Seq
2007-3833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284787 55977 CVE-2007-3833 24927  View
284788 55977 CVE-2007-3833 ADV-2007-2546  View
284789 55977 CVE-2007-3833 http://www.xs-sniper.com/nmcfeters/Cross-App-Scripting-2.html  View
284790 55977 CVE-2007-3833 trillian-aim-file-create(35449)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
53676 JVNDB-2007-002368 Cerulean Studios Trillian の AIM プロトコルハンドラにおける任意のコンテンツを含むファイルを作成される脆弱性 Cerulean Studios Trillian の AOL Instant Messenger (AIM) プロトコルハンドラには、任意のコンテンツを含むファイルを作成される脆弱性が存在します。 CVE-2007-3833 27188 CVE-2007-3833 55977 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002368.html 2007-07-17 2012-06-26 View