PT-2008-2179 · Sejoong Namo · Sejoong Namo Activesquare

Plan-S · Published 2008-02-01 · Updated 2017-09-29 · CVE-2008-0551

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sejoong Namo ActiveSquare 6 versions 3.0.0.1 and earlier

Description The issue allows remote attackers to execute arbitrary code via a URL in the argument to the Install() method of the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll.

Recommendations For versions 3.0.0.1 and earlier, consider disabling the Install() method of the NamoInstaller.NamoInstall.1 ActiveX control until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-0551

Affected Products

Sejoong Namo Activesquare

References · 8

• 🔥 http://securityfocus.com/bid/27453 · Exploit
• 🔥 https://exploit-db.com/exploits/4986 · Exploit
• http://secunia.com/advisories/28649 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0551 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39974 · Note
• http://securityfocus.com/bid/27580 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39943 · Note
• http://vupen.com/english/advisories/2008/0299 · Note