PT-2007-4574 · Xunlei · Xunlei Web Thunderbolt

Published 2007-06-20 · Updated 2008-11-15 · CVE-2007-3296

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xunlei Web Thunderbolt version 1.7.3.109

Description The issue allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods in the ThunderServer.webThunder.1 ActiveX control.

Recommendations For xunlei Web Thunderbolt version 1.7.3.109, consider disabling the ThunderServer.webThunder.1 ActiveX control to prevent exploitation until a patch is available.

Fix

Related Identifiers

CVE-2007-3296

Affected Products

Xunlei Web Thunderbolt

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-3296 · Security Note
• http://osvdb.org/38474 · Note
• http://whsafe.com/Article/ldgg/200706/12375.shtml · Note
• http://securityfocus.com/bid/24552 · Note