« Back to list

CVE-2007-3076

Status: ModifiedHigh (7.8)—

A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Zenturi — Zenturi Programchecker

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2007-3076",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-06T10:30:00.000",
  "references": [
    {
      "url": "http://moaxb.blogspot.com/2007/05/moaxb-30-zenturi-programchecker-activex.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://osvdb.org/36046",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25468",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24377",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2000",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://moaxb.blogspot.com/2007/05/moaxb-30-zenturi-programchecker-activex.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://osvdb.org/36046",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25468",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24377",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2007/2000",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system via the DownloadFile function."
    },
    {
      "lang": "es",
      "value": "Cierto control ActiveX en sasatl.dll en Zenturi ProgramChecker permite a atacantes remotos descargar ficheros de su elección al sistema cliente mediante la función DownloadFile."
    }
  ],
  "lastModified": "2026-06-16T22:41:01.280",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:zenturi:zenturi_programchecker:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9628881E-9FAF-48DC-BC73-B1E4BBEF5ADC"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}