CVE-2007-3487

MEDIUM 6.4CVE-2007-3487 · Published 29/06/2007 · updated 16/06/2026

In short

CVE-2007-3487 is a MEDIUM (CVSS 6.4) vulnerability affecting photo digital imaging activex control (hp).
Chance of exploitation in the next 30 days (EPSS): 8.8%, higher than 95.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
photo digital imaging activex control hp	`= 2.0.0.133`	No fix yet

Description

Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method.

References

osvdb.org/37675
secunia.com/advisories/25869 · Vendor Advisory
securityreason.com/securityalert/2846
securityfocus.com/archive/1/472384/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/35124
exploit-db.com/exploits/4119

More vulnerabilities in photo digital imaging activex control

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free