CVE-2007-4902: Ultra Shareware Ultra Crypto Component

Medium severity, CVSS 6.4. EPSS: 5.6% chance of exploitation in the next 30 days.

Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method.

Affected products

Published 2007-09-17. Last modified 2026-06-16.