CVE-2008-1116

{"id": "CVE-2008-1116", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-03-03T18:44:00.000", "references": [{"url": "http://secunia.com/advisories/29109", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27997", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0683/references", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40838", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5188", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29109", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/27997", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/0683/references", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40838", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/5188", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnarbilidad de m\u00e9todos no seguros en el control ActiveX de Web Scan Object (OL2005.dll) en Rising Antivirus Online Scanner permite a atacantes remotos forzar la descarga y ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante el establecimiento de la propiedad BaseURL e invocando el m\u00e9todo UpdateEngine.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la informaci\u00f3n de terceros."}], "lastModified": "2024-11-21T00:43:42.843", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rising_antivirus_international:rising_web_scan_object:18.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B44E1BDE-E6E8-4805-8475-C39FC08F6B26"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}