NVD

Id
1077  
Name
CVE-2008-1116  
Description
Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-03  
Modified Date
2011-03-07  
Seq
2008-1116  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
6681 1077 CVE-2008-1116 5188  View
6682 1077 CVE-2008-1116 27997  View
6683 1077 CVE-2008-1116 ADV-2008-0683  View
6684 1077 CVE-2008-1116 risingonline-webscan-code-execution(40838)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50224 JVNDB-2008-005534 Rising Antivirus Online Scanner の Web Scan Object ActiveX コントロール における任意のコードを強制的にダウンロードされる脆弱性 Rising Antivirus Online Scanner の Web Scan Object ActiveX コントロール (OL2005.dll) は、安全でないメソッドにより、任意のコードを強制的にダウンロードされる、および実行される脆弱性が存在します。 CVE-2008-1116 31229 CVE-2008-1116 1077 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005534.html 2008-03-03 2012-12-20 View