PT-2007-5307 · Baidu · Baidu Soba Search Bar

Published 2007-07-31 · Updated 2018-10-15 · CVE-2007-4105

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Baidu Soba Search Bar version 5.4

Description The issue concerns a certain ActiveX control in BaiduBar.dll, which allows remote attackers to execute arbitrary code. This can be achieved via a request that includes a link to download and a file to execute, possibly involving remote file inclusion.

Recommendations For Baidu Soba Search Bar version 5.4, consider disabling the vulnerable ActiveX control in BaiduBar.dll as a temporary workaround until a patch is available. Restrict access to the BaiduBar.dll module to minimize the risk of exploitation. Avoid using the affected ActiveX control in the Baidu Soba Search Bar until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2007-4105

Affected Products

Baidu Soba Search Bar

References · 8

• 🔥 https://exploit-db.com/exploits/30431 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4105 · Security Note
• http://secunia.com/advisories/26256 · Vendor Advisory
• http://fortiguardcenter.com/advisory/FGA-2007-10.html · Vendor Advisory
• http://securityfocus.com/bid/25121 · Note
• http://vupen.com/english/advisories/2007/2699 · Note
• http://securityfocus.com/archive/1/475320/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35692 · Note