CVE-2007-1682

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 29.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-08-27 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.

Affected products

Softartisans Xfile: through 2.3.4; 1.0, 1.0.6, 1.0.7, 1.0.8, 1.1, 1.01 (+17)

References

http://secunia.com/advisories/31615
http://support.softartisans.com/Support-114.aspx
http://www.kb.cert.org/vuls/id/914785
http://www.securityfocus.com/bid/30826
http://secunia.com/advisories/31615
http://support.softartisans.com/Support-114.aspx
http://www.kb.cert.org/vuls/id/914785
http://www.securityfocus.com/bid/30826

Get alerted when CVE-2007-1682 or the next vulnerability affects your stack