PT-2005-3753 · Unknown · Webarchivex.Dll

Brett Moore · Publicado 2005-09-14 · Atualizado 2017-07-11 · CVE-2005-2891

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions WebArchiveX.dll version 5.5.0.76

Description The issue allows remote attackers to read or write to arbitrary files. This is achieved via the (1) MakeArchive or (2) MakeArchiveStr methods.

Recommendations For WebArchiveX.dll version 5.5.0.76, consider disabling the MakeArchive and MakeArchiveStr methods until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-2891

Produtos afetados

Webarchivex.Dll

Referências · 7

• 🔥 http://securitytracker.com/alerts/2005/Sep/1014867.html · Exploit
• 🔥 http://security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf · Exploit
• http://marc.info/?l=bugtraq&m=112611388014937&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22188 · Nota
• http://securityfocus.com/bid/14760 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2891 · Nota de Segurança
• http://secunia.com/advisories/16722 · Aviso do Fabricante