CVE-2007-1684 Information

Description

The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitrary commands via the (1) installerpath and (2) applicationarguments arguments.

Reference

http://osvdb.org/34320 http://secunia.com/advisories/24762 http://www.kb.cert.org/vuls/id/556801 http://www.securityfocus.com/bid/23290 http://www.securitytracker.com/id?1017855 http://www.vupen.com/english/advisories/2007/1216 https://exchange.xforce.ibmcloud.com/vulnerabilities/33428