9.3

CVE-2008-1617

Exploit
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Interwoven ≫ Worksite Web Version <= 8.2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.37% 0.9
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/29733
Vendor Advisory
http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
Exploit
http://www.securityfocus.com/bid/28628
Exploit
http://www.vupen.com/english/advisories/2008/1134/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41699