CVE-2007-5219

no score yetEPSS 16%

cyberlink powerdvd: no CVSS score yet. EPSS 16% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.

EPSS: 16% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2007-10-05
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cyberlink:powerdvd

References

http://osvdb.org/37725
http://secunia.com/advisories/27039
http://www.securityfocus.com/bid/25888
http://www.securitytracker.com/id?1018758
http://www.vupen.com/english/advisories/2007/3328

Check your stack JSON