CVE-2007-4600

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-10-18 · updated 2026-06-16
Weakness: CWE-264

Description

The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access restrictions via a protection element in a gzipped XML file, which allows attackers to bypass these restrictions by removing this element.

Affected products

PTC Mathcad: 12, 13, 13.1, 14

References

http://osvdb.org/43764
http://securityreason.com/securityalert/3248
http://www.securityfocus.com/archive/1/482341/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/37263
http://osvdb.org/43764
http://securityreason.com/securityalert/3248
http://www.securityfocus.com/archive/1/482341/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/37263

Get alerted when CVE-2007-4600 or the next vulnerability affects your stack