CVE-2007-5322

Published: Oct 9, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote attackers to execute arbitrary programs by specifying them as an argument to the FoxDoCmd function.

Affected (1)

Products: Microsoft: Visual Foxpro

Microsoft

1 product

Visual Foxpro

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Visual Foxpro	Version 6.0

Related CWEs

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

References (12)

http://osvdb.org/38487

Source: cve@mitre.org

http://secunia.com/advisories/27165

Source: cve@mitre.org

http://shinnai.altervista.org/exploits/txt/TXT_14md9AHOoCycrnk9l095.html

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/25977

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/37035

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4506

Source: cve@mitre.org

http://osvdb.org/38487