CVE-2007-4067

Clever Internet ActiveX Suite 6.2 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4067. PoCs published by shinnai.

AI-analyzed exploit summary This exploit leverages the 'GetToFile' method in the Clever Internet ActiveX Suite 6.2 (CLINETSUITEX6.OCX) to arbitrarily download and overwrite files on a victim's system. The PoC demonstrates downloading a text file to a system directory, with potential for more malicious use.

Description

Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these details are obtained from third party information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by shinnai · htmlremotewindows
https://www.exploit-db.com/exploits/4226

This exploit leverages the 'GetToFile' method in the Clever Internet ActiveX Suite 6.2 (CLINETSUITEX6.OCX) to arbitrarily download and overwrite files on a victim's system. The PoC demonstrates downloading a text file to a system directory, with potential for more malicious use.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Clever Internet ActiveX Suite 6.2 (CLINETSUITEX6.OCX)
No auth needed
Prerequisites: Victim must visit a malicious webpage or open a malicious HTML file · ActiveX control must be installed and enabled
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/4226
Exploit, Patch mailing-list x_refsource_vim
http://www.attrition.org/pipermail/vim/2007-July/001729.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2659
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25063
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26213
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35590

Scores

EPSS 0.0697
EPSS Percentile 93.3%

Details

Status published
Products (1)
clever_components/internet_activex_suite < 6.2
Published Jul 30, 2007
Tracked Since Feb 18, 2026