CVE-2007-4891 — A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell

Back Back to CVE browser

MEDIUM

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell

Published Sep 14, 2007

6.8

MEDIUM

CVSS 2.0

EPSS 31.00%

Description

A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers to execute arbitrary programs and have other impacts, as demonstrated using absolute pathnames in arguments to StartProcess and SyncShell.

Affected products

Remediation

No remediation recorded yet.

Metrics

31.00% 0.31003

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.31003

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (18 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	31.00% (0.31003)	98.21th	v5 (v2026.06.15)
Jun 15, 2026	31.00% (0.31003)	98.02th	v5 (v2026.06.15)
Oct 9, 2025	51.67% (0.51667)	97.73th	v4 (v2025.03.14)
Mar 30, 2025	57.93% (0.57927)	97.99th	v4 (v2025.03.14)
Mar 29, 2025	69.26% (0.69260)	98.14th	v4 (v2025.03.14)
Mar 17, 2025	57.93% (0.57927)	97.96th	v4 (v2025.03.14)
Dec 17, 2024	86.32% (0.86321)	98.83th	v3 (v2023.03.01)
Dec 12, 2024	90.57% (0.90574)	98.97th	v3 (v2023.03.01)
Oct 2, 2024	90.26% (0.90261)	98.89th	v3 (v2023.03.01)
Jul 18, 2024	92.26% (0.92258)	99.00th	v3 (v2023.03.01)
Jun 10, 2024	91.77% (0.91771)	98.92th	v3 (v2023.03.01)
May 3, 2024	94.66% (0.94659)	99.23th	v3 (v2023.03.01)
Jul 10, 2023	95.29% (0.95288)	99.02th	v3 (v2023.03.01)
Apr 29, 2023	95.75% (0.95750)	99.07th	v3 (v2023.03.01)
Mar 24, 2023	95.81% (0.95811)	99.04th	v3 (v2023.03.01)
Mar 7, 2023	95.65% (0.95651)	98.98th	v3 (v2023.03.01)
Mar 6, 2023	26.56% (0.26556)	97.12th	v2 (v2022.01.01)
Feb 4, 2022	26.56% (0.26556)	95.76th	v2 (v2022.01.01)

Weaknesses (1)

CWE-78

OS Command Injection

References (6)

http://osvdb.org/37106
vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/26779
third-party-advisoryx_refsource_SECUNIA
http://shinnai.altervista.org/exploits/txt/TXT_AZJ5bXwXvMARqwtfe97I.html
x_refsource_MISC
http://www.securityfocus.com/bid/25638
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/36572
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4393
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/37106		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/26779		third-party-advisoryx_refsource_SECUNIA
http://shinnai.altervista.org/exploits/txt/TXT_AZJ5bXwXvMARqwtfe97I.html		x_refsource_MISC
http://www.securityfocus.com/bid/25638		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/36572		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/4393		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 14, 2007

Updated Aug 7, 2024

Reserved Sep 13, 2007

Link CVE-2007-4891

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-4891

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-4891