CVE-2008-1116

Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/29109	Vendor Advisory
http://www.securityfocus.com/bid/27997	Patch
http://www.vupen.com/english/advisories/2008/0683/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/40838
https://www.exploit-db.com/exploits/5188

Configurations

Configuration 1 (hide)

cpe:2.3:a:rising_antivirus_international:rising_web_scan_object:18.0.7:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-03-03 18:44

Updated : 2024-02-28 11:01

NVD link : CVE-2008-1116

Mitre link : CVE-2008-1116

CVE.ORG link : CVE-2008-1116

JSON object : View

Products Affected

rising_antivirus_international

rising_web_scan_object

CWE

NVD-CWE-Other

{"id": "CVE-2008-1116", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-03-03T18:44:00.000", "references": [{"url": "http://secunia.com/advisories/29109", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27997", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0683/references", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40838", "source": "cve@mitre.org"}, {"url": "https://www.exploit-db.com/exploits/5188", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "Vulnarbilidad de m\u00e9todos no seguros en el control ActiveX de Web Scan Object (OL2005.dll) en Rising Antivirus Online Scanner permite a atacantes remotos forzar la descarga y ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n mediante el establecimiento de la propiedad BaseURL e invocando el m\u00e9todo UpdateEngine.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la informaci\u00f3n de terceros."}], "lastModified": "2017-09-29T01:30:33.973", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rising_antivirus_international:rising_web_scan_object:18.0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B44E1BDE-E6E8-4805-8475-C39FC08F6B26"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}