CVE-2007-3785

EldoS SecureBlackbox 5.1.0.112 - Absolute Path Traversal via SaveToFile Method

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-3785. PoCs published by callAX.

AI-analyzed exploit summary This exploit leverages an arbitrary data write vulnerability in PGPBBox.dll (SecureBlackbox) via the SaveToFile method, allowing an attacker to write arbitrary data to a file on the victim's system through a crafted HTML page.

Description

Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox (sbb) 5.1.0.112 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by callAX · htmlremotewindows
https://www.exploit-db.com/exploits/4176

This exploit leverages an arbitrary data write vulnerability in PGPBBox.dll (SecureBlackbox) via the SaveToFile method, allowing an attacker to write arbitrary data to a file on the victim's system through a crafted HTML page.

Classification
Working Poc 90%
Attack Type
Other
Complexity
Trivial
Reliability
Reliable
Target: SecureBlackbox PGPBBox.dll 5.1.0.112
No auth needed
Prerequisites: Victim must visit a malicious webpage · PGPBBox.dll must be registered and accessible via the provided CLSID
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35368
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/24882
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/39748

Scores

EPSS 0.0190
EPSS Percentile 76.9%

Details

Status published
Products (1)
eldos_corporation/secureblackbox 5.1.0.112
Published Jul 15, 2007
Tracked Since Feb 18, 2026