CVE-2007-1684

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-04-06 · updated 2026-06-16

Description

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

Affected products

Solidworks Sldimdownload Activex Control: 16.0.0.5

References

http://osvdb.org/34320
http://secunia.com/advisories/24762
http://www.kb.cert.org/vuls/id/556801
http://www.securityfocus.com/bid/23290
http://www.securitytracker.com/id?1017855
http://www.vupen.com/english/advisories/2007/1216
https://exchange.xforce.ibmcloud.com/vulnerabilities/33428
http://osvdb.org/34320
http://secunia.com/advisories/24762
http://www.kb.cert.org/vuls/id/556801
http://www.securityfocus.com/bid/23290
http://www.securitytracker.com/id?1017855

Get alerted when CVE-2007-1684 or the next vulnerability affects your stack