PT-2007-5307 · Baidu · Baidu Soba Search Bar

Publicado 2007-07-31 · Atualizado 2018-10-15 · CVE-2007-4105

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Baidu Soba Search Bar version 5.4

Description The issue concerns a certain ActiveX control in BaiduBar.dll, which allows remote attackers to execute arbitrary code. This can be achieved via a request that includes a link to download and a file to execute, possibly involving remote file inclusion.

Recommendations For Baidu Soba Search Bar version 5.4, consider disabling the vulnerable ActiveX control in BaiduBar.dll as a temporary workaround until a patch is available. Restrict access to the BaiduBar.dll module to minimize the risk of exploitation. Avoid using the affected ActiveX control in the Baidu Soba Search Bar until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2007-4105

Produtos afetados

Baidu Soba Search Bar

Referências · 8

• 🔥 https://exploit-db.com/exploits/30431 · Exploit
• http://securityfocus.com/bid/25121 · Nota
• http://vupen.com/english/advisories/2007/2699 · Nota
• http://securityfocus.com/archive/1/475320/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4105 · Nota de Segurança
• http://secunia.com/advisories/26256 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35692 · Nota
• http://fortiguardcenter.com/advisory/FGA-2007-10.html · Aviso do Fabricante