VULNERABILITY INTELLIGENCE
CVE-2007-3649
CVSS score6.8 MEDIUM
EPSS probability4.56%
CISA KEVNot currently listed
Published2007-07-10
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via the second argument to the SaveToFile method.