Absolute Path Traversal Vulnerability in HP Digital Imaging Control

CVE-2007-3649

Summary

An absolute path traversal vulnerability exists within an ActiveX control in HP's Digital Imaging software. This flaw allows remote attackers to manipulate file paths through the SaveToFile method, potentially leading to unauthorized file creation or overwriting on the targeted system. The issue specifically revolves around how the second argument of this method handles input, creating a security risk that can be exploited by malicious actors.

References