What’s Vulnerable › Vulnerabilities

CVE-2007-3459

• Severity: medium (CVSS 6.4 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2007-06-27 · updated 2026-06-16

Description

A certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the WriteMovie method.

Affected products

• Civiltech Avax Vector Activex: 1.3

References

• http://osvdb.org/38037
• http://securityreason.com/securityalert/2844
• http://www.securityfocus.com/archive/1/472296/100/0/threaded
• http://www.securityfocus.com/bid/24659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35089
• https://www.exploit-db.com/exploits/4110
• http://osvdb.org/38037
• http://securityreason.com/securityalert/2844
• http://www.securityfocus.com/archive/1/472296/100/0/threaded
• http://www.securityfocus.com/bid/24659
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35089
• https://www.exploit-db.com/exploits/4110

Get alerted when CVE-2007-3459 or the next vulnerability affects your stack