CVE-2008-5404
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote…
Published 17 y ago · modified 4 mo ago · JSON
Summary
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploit prediction (EPSS)
3.88% probability of exploitation in the next 30 days, higher than 90% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- secunia.com /advisories/32829 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/46809 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/32443 · vdb-entry, x_refsource_BID, x_transferred
Sources
- CVE List: CVE-2008-5404
- NVD: CVE-2008-5404
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.