Vulnerability in HP Photo Digital Imaging Activex Control

CVE-2007-3649

Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method.

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

Affected products

Hp Photo_digital_imaging_activex_control — versions 2.1.0.556
N/a — versions n/a

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_OSVDB, vdb-entry)