CVE-2007-1684

CRITICO 9.3CVE-2007-1684 · Published 06/04/2007 · updated 16/06/2026

In breve

CVE-2007-1684 è una vulnerabilità CRITICO (CVSS 9.3) che riguarda sldimdownload activex control (solidworks).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.7%, superiore al 91.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
sldimdownload activex control solidworks	`= 16.0.0.5`	No fix yet

Description

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

References

osvdb.org/34320
secunia.com/advisories/24762 · Patch
kb.cert.org/vuls/id/556801 · Patch
securityfocus.com/bid/23290 · Patch
securitytracker.com/id · Vendor Advisory
vupen.com/english/advisories/2007/1216
exchange.xforce.ibmcloud.com/vulnerabilities/33428

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free