PT-2009-2635 · Uusee · Uusee Uuupgrade

Publicado 2009-09-08 · Atualizado 2017-08-17 · CVE-2008-7168

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UUSee UUUpgrade version 3.0.2.12

Description The issue is related to an insecure method in the UUSee UUUpgrade ActiveX control. This allows remote attackers to force the download and overwrite of arbitrary files via crafted arguments to the Update method. The issue has been exploited in the wild.

Recommendations For version 3.0.2.12, consider disabling the Update method in the UUUpgrade ActiveX control until a patch is available. Restrict access to the UUUpgrade.ocx file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2008-7168

Produtos afetados

Uusee Uuupgrade

Referências · 5

• 🔥 http://securityfocus.com/bid/29963 · Exploit
• 🔥 http://downloads.securityfocus.com/vulnerabilities/exploits/29963.html · Exploit
• 🔥 https://exploit-db.com/exploits/31980 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7168 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43428 · Nota