CVE-2007-1684

Published: Apr 6, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

Affected (1)

Products: Solidworks: Sldimdownload Activex Control

Solidworks

1 product

Sldimdownload Activex Control

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Solidworks Sldimdownload Activex Control	Version 16.0.0.5

References (14)

http://osvdb.org/34320

Source: cret@cert.org

http://secunia.com/advisories/24762

Source: cret@cert.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/556801

Source: cret@cert.org

PatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/23290

Source: cret@cert.org

PatchVendor Advisory

http://www.securitytracker.com/id?1017855

Source: cret@cert.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/1216

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33428

Source: cret@cert.org

http://osvdb.org/34320