PT-2007-4574 · Xunlei · Xunlei Web Thunderbolt

Publicado 2007-06-20 · Atualizado 2008-11-15 · CVE-2007-3296

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xunlei Web Thunderbolt version 1.7.3.109

Description The issue allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods in the ThunderServer.webThunder.1 ActiveX control.

Recommendations For xunlei Web Thunderbolt version 1.7.3.109, consider disabling the ThunderServer.webThunder.1 ActiveX control to prevent exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2007-3296

Produtos afetados

Xunlei Web Thunderbolt

Referências · 4

• http://osvdb.org/38474 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3296 · Nota de Segurança
• http://whsafe.com/Article/ldgg/200706/12375.shtml · Nota
• http://securityfocus.com/bid/24552 · Nota