QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-2240

Back to search

CVE-2007-2240

Published: Aug 15, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1.0.0.9 (Automated Solutions 1.0 before fix pack 1), does not properly validate digital signatures of downloaded software, which makes it easier for remote attackers to spoof a download.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2007-2882
vdb-entry
x_refsource_VUPEN
39555
vdb-entry
x_refsource_OSVDB
MS07-045
vendor-advisory
x_refsource_MS
26482
third-party-advisory
x_refsource_SECUNIA
25311
vdb-entry
x_refsource_BID
VU#570705
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now