NVD

Id
1559  
Name
CVE-2008-1617  
Description
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-04-08  
Modified Date
2011-03-07  
Seq
2008-1617  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
10119 1559 CVE-2008-1617 http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf  View
10120 1559 CVE-2008-1617 28628  View
10121 1559 CVE-2008-1617 ADV-2008-1134  View
10122 1559 CVE-2008-1617 worksite-webtransferctrl-code-execution(41699)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48977 JVNDB-2008-004287 WorkSite Web で使用される iManFile.cab におけるメモリ二重解放の脆弱性 WorkSite Web で使用される Web TransferCtrl Class (iManFile.cab) には、メモリを二重に解放する不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-1617 31730 CVE-2008-1617 1559 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004287.html 2008-04-08 2012-09-25 View