CVE-2007-3296

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods.

Score
CVSS 2.0 9.3 Critical
Status
Modified - cve@mitre.org
Published
2007-06-20
Last modified
2024-08-07

Affected products

References