CVE-2007-5219

MÉDIO 6.4CVE-2007-5219 · Published 05/10/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
powerdvd cyberlink	`= 7.0`	No fix yet

Description

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.

References

osvdb.org/37725
secunia.com/advisories/27039 · Vendor Advisory
securityfocus.com/bid/25888 · Exploit
securitytracker.com/id
vupen.com/english/advisories/2007/3328
exchange.xforce.ibmcloud.com/vulnerabilities/36902
exploit-db.com/exploits/4479

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free