CVE-2007-5017

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo!

published September 20, 2007

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8.1.0.421 allows remote attackers to force a download, and create or overwrite arbitrary files via a full pathname in the second argument to the GetFile method.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02548 · 84.8th percentile
Published
2007-09-20T21:00Z
EPSS history
Timeline
  • 20 SEP 21:00Z
    Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo!
    cvelistv5