{"id":"CVE-2007-1682","aliases":["EUVD-2007-1676","GHSA-7j4x-6x3f-7phh"],"status":"published","title":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in...","description":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.29613,"percentile":0.98203,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2008-08-27T20:00:00Z","modified":"2026-06-16T22:38:06Z","exploits":[{"source":"exploitdb","id":"EDB-16592","title":"SoftArtisans XFile FileManager - ActiveX Control Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-05-09","verified":true,"url":"https://www.exploit-db.com/exploits/16592"},{"source":"metasploit","id":"exploit/windows/browser/softartisans_getdrivename","title":"SoftArtisans XFile FileManager ActiveX Control Buffer Overflow","type":"exploit","platform":"Windows","date":"2008-08-25","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/browser/softartisans_getdrivename"}],"products":[{"vendor":"softartisans","product":"xfile"}],"references":[{"url":"http://www.kb.cert.org/vuls/id/914785","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"http://secunia.com/advisories/31615","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/30826","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://support.softartisans.com/Support-114.aspx","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-1682"},{"url":"https://github.com/advisories/GHSA-7j4x-6x3f-7phh"}],"sources":{"cve":[{"id":"CVE-2007-1682","description":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.","status":"published","published":"2008-08-27T20:00:00Z","modified":"2024-08-07T13:06:25.994Z","updated_at":"2026-11-02T13:33:41.472948Z"}],"euvd":[{"id":"EUVD-2007-1676","description":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.","status":"published","published":"2008-08-27T20:00:00Z","modified":"2024-08-07T13:06:25Z","updated_at":"2026-11-03T01:38:24.820783Z"}],"ghsa":[{"id":"GHSA-7j4x-6x3f-7phh","title":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in...","description":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.","status":"published","published":"2022-05-01T17:55:57Z","modified":"2023-01-31T05:03:22Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:27.42074Z"}],"nvd":[{"id":"CVE-2007-1682","description":"Multiple stack-based buffer overflows in the FileManager ActiveX control in SAFmgPws.dll in SoftArtisans XFile before 2.4.0 allow remote attackers to execute arbitrary code via unspecified calls to the (1) BuildPath, (2) GetDriveName, (3) DriveExists, or (4) DeleteFile method.","status":"published","published":"2008-08-27T20:41:00Z","modified":"2026-06-16T22:38:06.263Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:24.110006Z"}]}}