CVE-2007-4890
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio...
- Published
- Sep 14, 2007
- Updated
- Aug 7, 2024
- Assigning CNA
- mitre
- Evidence observed
- Sep 11, 2007
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:M/Au:N/C:N/I:P/A:PModerate · next 30 days
- Percentile
- 96.9%
- Model date
- Sep 21, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can be copied from local files via the Load method.
Sources
1shinnai · windows · Sep 11, 2007
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.