PT-2004-1252 · Firstclass · Firstclass Desktop Client

Published 2004-01-08 · Updated 2017-07-11 · CVE-2004-0037

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FirstClass Desktop Client version 7.1

Description The issue allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.

Recommendations For FirstClass Desktop Client version 7.1, consider disabling the handling of hyperlinks in FirstClass RTF messages until a patch is available.

Fix

Related Identifiers

CVE-2004-0037

Affected Products

Firstclass Desktop Client

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2004-0037 · Security Note
• http://securityfocus.com/bid/9370 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=107340950611167&w=2 · Note
• http://secunia.com/advisories/10556 · Note
• http://osvdb.org/3442 · Note
• http://securitytracker.com/id?1008609 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14151 · Note