Path Traversal in Pegasus Imaging Imagxpress
CVE-2007-5320
Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control (PegasusImaging.ActiveX.ThumnailXpress1.dll) or (2) overwrite arbitrary files via the CompactFile function in the ImagXpress.8 ActiveX control (PegasusImaging.ActiveX.ImagXpress8.dll).
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 4.0 (Medium). Vector: AV:N/AC:H/Au:N/C:N/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.065 (93.5th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 93.5% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.065 · newest: 0.065 · change: 0.000
Affected products
- Pegasus Imaging Imagxpress — versions 8.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.securityfocus.com/bid/25948 (Exploit, vdb-entry)
- shinnai.altervista.org/exploits/txt/TXT_3DQ1nIkI6zmWCek4zP5U.html (Exploit)
- osvdb.org/37959 (vdb-entry)
- secunia.com/advisories/27095 (Vendor Advisory, third-party-advisory)
- www.vupen.com/english/advisories/2007/3388 (vdb-entry)
- shinnai.altervista.org/exploits/txt/TXT_wfv7ZG0G6KnQlk1SieLd.html (Exploit)
- exchange.xforce.ibmcloud.com/vulnerabilities/37012 (vdb-entry)
- www.securityfocus.com/bid/25949 (vdb-entry)
- osvdb.org/37960 (vdb-entry)
Frequently asked questions
- What is CVE-2007-5320?
- CVE-2007-5320 is a vulnerability in Pegasus Imaging Imagxpress, classified under Path Traversal. Published 2007-10-09.
- Is CVE-2007-5320 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.