CVE-2007-1684

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://osvdb.org/34320
http://secunia.com/advisories/24762Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/556801Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/23290Patch, Vendor Advisory
http://www.securitytracker.com/id?1017855Vendor Advisory
http://www.vupen.com/english/advisories/2007/1216
https://exchange.xforce.ibmcloud.com/vulnerabilities/33428
http://osvdb.org/34320
http://secunia.com/advisories/24762Patch, Vendor Advisory
http://www.kb.cert.org/vuls/id/556801Patch, Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/23290Patch, Vendor Advisory
http://www.securitytracker.com/id?1017855Vendor Advisory
http://www.vupen.com/english/advisories/2007/1216
https://exchange.xforce.ibmcloud.com/vulnerabilities/33428

Timeline

Published: Apr 6, 2007
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-168510.0Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to CVE-2007-168710.0Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll) allow remote attack CVE-2007-16889.3Buffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player allows remote attackers to execute arbitrary co CVE-2007-168910.0Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows re CVE-2007-16906.8Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx) allow remote attackers to execute arb CVE-2007-16916.8Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control (ActiveMod.ocx) allows remote attackers to execute arbitrary CVE-2007-16927.5The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might all CVE-2007-16937.8The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an incorrect variable th CVE-2007-169510.0PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP cod CVE-2007-16967.5SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL comm CVE-2007-169710.0PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code CVE-2007-16985.0download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information v