« Volver al listado

CVE-2007-3296

Estado: ModificadaAlta (9.3)—

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Xunlei — WEB Thunderbolt

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-3296",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9.3,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-20T21:30:00.000",
  "references": [
    {
      "url": "http://osvdb.org/38474",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24552",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.whsafe.com/Article/ldgg/200706/12375.shtml",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/38474",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24552",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.whsafe.com/Article/ldgg/200706/12375.shtml",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods."
    },
    {
      "lang": "es",
      "value": "El control ActiveX ThunderServer.webThunder.1 en xunlei Web Thunderbolt 1.7.3.109 permite a atacantes remotos descargar ficheros de su elección y llevar a cabo otras acciones no autorizadas invocando métodos peligrosos."
    }
  ],
  "lastModified": "2026-06-16T22:41:26.387",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:xunlei:web_thunderbolt:1.7.3.109:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD83B705-1A46-4533-8D3B-540D789751F3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}