PT-2019-12959 · Yes24 · Yes24Viewerx Activex Control

Publicado 2019-08-15 · Atualizado 2020-10-06 · CVE-2019-12809

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Yes24ViewerX ActiveX Control versions 1.0.327.50126 and earlier

Description The issue allows remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method, which can be leveraged for code execution.

Recommendations For versions 1.0.327.50126 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-494

Identificadores relacionados

CVE-2019-12809

Produtos afetados

Yes24Viewerx Activex Control

Referências · 3

• https://osv.dev/vulnerability/CVE-2019-12809 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-12809 · Nota de Segurança
• https://boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35117 · Nota