CVE-2007-5322

{"id": "CVE-2007-5322", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2007-10-09T22:17:00.000", "references": [{"url": "http://osvdb.org/38487", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/27165", "source": "cve@mitre.org"}, {"url": "http://shinnai.altervista.org/exploits/txt/TXT_14md9AHOoCycrnk9l095.html", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/25977", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37035", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/4506", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/38487", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/27165", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://shinnai.altervista.org/exploits/txt/TXT_14md9AHOoCycrnk9l095.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/25977", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/37035", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/4506", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the FoxDoCmd function."}, {"lang": "es", "value": "El control ActiveX FPOLE.OCX 6.0.8450.0 en Microsoft Visual FoxPro 6.0 permite a atacantes remotos ejecutar programas de su elecci\u00f3n especific\u00e1ndolos como un argumento para la funci\u00f3n FoxDoCmd."}], "lastModified": "2024-11-21T00:37:39.050", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:visual_foxpro:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8936D267-41DF-4310-A990-5883787728E3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}