What is CVE-2007-1682?

CVE-2007-1682 is a vulnerability in Softartisans Xfile, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-08-27.

Is CVE-2007-1682 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Softartisans Xfile

CVE-2007-1682

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.

Vulnerability class: Buffer Overflow

EPSS: 0.296 (98.0th percentile) — read the EPSS interpretation.

Affected products

Softartisans Xfile — versions 1.0, 1.0.6, 1.0.7
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cret@cert.org (vdb-entry, x_refsource_BID)
cret@cert.org (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2007-1682?: CVE-2007-1682 is a vulnerability in Softartisans Xfile, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-08-27.
Is CVE-2007-1682 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.