CVE-2007-2929

Currently unrated

Key Information:

Vendor
Lenovo
Status
Automated Solutions
Access Support
Vendor
CVE Published:
15 August 2007

Summary

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), exposes unsafe methods to arbitrary web domains, which allows remote attackers to download arbitrary code onto a client system and execute this code.

References

http://www.vupen.com/english/advisories/2007/2882
vdb-entryx_refsource_VUPEN
http://www-307.ibm.com/pc/support/site.wss/document.do?si...
x_refsource_CONFIRM
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.