CVE-2007-4105

EXPLOITED

BaiduBar.dll - RCE

Title source: llm

Description

A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion.

Exploits (1)

exploitdb WORKING POC VERIFIED

by cocoruder · htmlremotewindows

https://www.exploit-db.com/exploits/30431

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://secunia.com/advisories/26256

[Patch, Vendor Advisory] http://www.fortiguardcenter.com/advisory/FGA-2007-10.html

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/35692

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/475320/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25121

[Third Party Advisory] http://www.vupen.com/english/advisories/2007/2699

Scores

EPSS 0.0673

EPSS Percentile 91.3%

Details

VulnCheck KEV 2011-09-01

Status published

Products (1)

baidu/soba_search_bar 5.4

Published Jul 31, 2007

Tracked Since Feb 18, 2026