← Database

CVE-2007-3487

MEDIUM CVSS: 6.4 Published: 2007-06-29 Modified: 2026-06-16

Description

Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the argument to the saveXMLAsFile method.

Affected Platforms

Hp Photo Digital Imaging Activex Control

Weakness Type

CWE-22

References