PT-2008-2179 · Sejoong Namo · Sejoong Namo Activesquare

Plan-S · Publicado 2008-02-01 · Atualizado 2017-09-29 · CVE-2008-0551

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sejoong Namo ActiveSquare 6 versions 3.0.0.1 and earlier

Description The issue allows remote attackers to execute arbitrary code via a URL in the argument to the Install() method of the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll.

Recommendations For versions 3.0.0.1 and earlier, consider disabling the Install() method of the NamoInstaller.NamoInstall.1 ActiveX control until a patch is available.

Exploit

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2008-0551

Produtos afetados

Sejoong Namo Activesquare

Referências · 8

• 🔥 http://securityfocus.com/bid/27453 · Exploit
• 🔥 https://exploit-db.com/exploits/4986 · Exploit
• http://secunia.com/advisories/28649 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0551 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39974 · Nota
• http://securityfocus.com/bid/27580 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39943 · Nota
• http://vupen.com/english/advisories/2008/0299 · Nota