CVE-2007-4471

CVE-2007-4471 describes multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control prior to version 10. These flaws allow remote attackers to create or overwrite arbitrary files, potentially leading to code execution by writing to critical system directories, likely through path traversal in methods like httpGETToFile and httpPOSTFromFile. With a CVSS score of 9.3 (Critical), the vulnerability is network-exploitable with medium attack complexity and results in complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage for this older vulnerability.