CVE-2007-5219: Cyberlink Powerdvd

Medium severity, CVSS 6.4. EPSS: 15.7% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the CLAVSetting.CLSetting.1 ActiveX control in CLAVSetting.DLL 1.00.1829 in the CLAVSetting module in CyberLink PowerDVD 7.0 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the CreateNewFile method.

Affected products

• Cyberlink Powerdvd: version 7.0 only

Published 2007-10-05. Last modified 2026-06-16.