← Database

CVE-2007-4902

MEDIUM CVSS: 6.4 Published: 2007-09-17 Modified: 2026-06-16

Description

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method.

Affected Platforms

Ultra Shareware Ultra Crypto Component

Weakness Type

CWE-22

References