CVE:CVE-2007-2853
CNNVD:CNNVD-200705-477
Virtual CD 9.0.0.2版本的vc9api.DLL 9.0.0.57版本中的VCDAPILibApi ActiveX控件中存在任意命令执行漏洞。远程攻击者可借助向VCDLaunchAndWait函数发送的一个参数中的命令行执行任意命令。
solution:Upgrade h+h vcdapilibapi_activex_control to a higher version than 9.0.0.57,and avoid the version 9.0.0.57; Upgrade h+h virtual_cd to a higher version than 9.0.0.2,and avoid the version 9.0.0.2