CVE-2007-4890
Microsoft Visual Studio 6.0 - Arbitrary File Write via VBTOVSI.DLL SaveAs Method
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2007-4890. PoCs published by shinnai.
AI-analyzed exploit summary This exploit leverages the VBTOVSI.DLL library in Microsoft Visual Studio 6.0 to overwrite arbitrary files on the local system by using the Load() and SaveAs() methods. It demonstrates an arbitrary file overwrite vulnerability that can be triggered via a malicious HTML page.
Description
Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveAs method. NOTE: contents can be copied from local files via the Load method.
Exploits (1)
This exploit leverages the VBTOVSI.DLL library in Microsoft Visual Studio 6.0 to overwrite arbitrary files on the local system by using the Load() and SaveAs() methods. It demonstrates an arbitrary file overwrite vulnerability that can be triggered via a malicious HTML page.