NVD

Id
3741  
Name
CVE-2008-3879  
Description
The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-09-02  
Modified Date
2009-01-29  
Seq
2008-3879  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
23696 3741 CVE-2008-3879 4201  View
23697 3741 CVE-2008-3879 6319  View
23698 3741 CVE-2008-3879 30863  View
23699 3741 CVE-2008-3879 http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219827906.ff.php  View
23700 3741 CVE-2008-3879 http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html  View
23701 3741 CVE-2008-3879 uoc-ultraofficecontrol-file-overwrite(44750)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50878 JVNDB-2008-006188 Ultra Shareware Ultra Office Control の Ultra.OfficeControl ActiveX コントロールにおけるクライアントシステムに任意のファイルを強制ダウンロードされる脆弱性 Ultra Shareware Ultra Office Control の OfficeCtrl.ocx の Ultra.OfficeControl ActiveX コントロールには、クライアントシステムに任意のファイルを強制ダウンロードされる脆弱性が存在します。 CVE-2008-3879 33992 CVE-2008-3879 3741 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006188.html 2008-09-02 2012-12-20 View