CVE-2007-0827

MEDIO 6.8CVE-2007-0827 · Published 07/02/2007 · updated 16/06/2026

En resumen

CVE-2007-0827 es una vulnerabilidad MEDIO (CVSS 6.8) que afecta a alipay activex control (alibaba).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.3%, mayor que el 91.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
alipay activex control alibaba	`≤ 2.4.2.471`	No fix yet

Description

The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute arbitrary code via a JavaScript function that invokes the Remove method with an invalid index argument, which is used as an offset for a function call.

References

lists.grok.org.uk/pipermail/full-disclosure/2007-February/052250.html
osvdb.org/33123
secunia.com/advisories/24063 · Vendor Advisory
securityfocus.com/bid/22446 · Exploit
vupen.com/english/advisories/2007/0520 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/32367
exploit-db.com/exploits/3279

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free