CVE-2007-4891: microsoft visual_studio OS Command Injection

Vulnerability summary

CVE-2007-4891 is a medium (CVSS 6.8) OS Command Injection vulnerability in microsoft visual_studio. EPSS estimates a 31.00% chance of exploitation in the next 30 days, higher than 98.2% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 14-09-2007
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.

• CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.