CVE

Id
31734  
CVE No.
CVE-2008-1617  
Status
Candidate  
Description
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.  
Phase
Assigned (20080402)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
341230 31734 CVE-2008-1617 MISC:http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf  View
341231 31734 CVE-2008-1617 BID:28628  View
341232 31734 CVE-2008-1617 URL:http://www.securityfocus.com/bid/28628  View
341233 31734 CVE-2008-1617 VUPEN:ADV-2008-1134  View
341234 31734 CVE-2008-1617 URL:http://www.vupen.com/english/advisories/2008/1134/references  View
341235 31734 CVE-2008-1617 SECUNIA:29733  View
341236 31734 CVE-2008-1617 URL:http://secunia.com/advisories/29733  View
341237 31734 CVE-2008-1617 XF:worksite-webtransferctrl-code-execution(41699)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47597 JVNDB-2008-002907 GeeCarts におけるクロスサイトスクリプティングの脆弱性 GeeCarts には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2008-1621 31734 4.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002907.html  View