CVE-2007-5219

high

Description

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.

References

https://www.exploit-db.com/exploits/4479

https://exchange.xforce.ibmcloud.com/vulnerabilities/36902

http://www.vupen.com/english/advisories/2007/3328

http://www.securitytracker.com/id?1018758

http://secunia.com/advisories/27039

http://osvdb.org/37725

Details

Source: Mitre, NVD

Published: 2007-10-05

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Severity: High

EPSS

EPSS: 0.06308