CVE-2007-2928

Currently unrated

Key Information:

Vendor
Lenovo
Status
Automated Solutions
Access Support
Vendor
CVE Published:
15 August 2007

Summary

Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), allows remote attackers to execute arbitrary code via format string specifiers in unknown data.

References

http://www.vupen.com/english/advisories/2007/2882
vdb-entryx_refsource_VUPEN
http://www-307.ibm.com/pc/support/site.wss/document.do?si...
x_refsource_CONFIRM
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

17% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.