CVE-2008-1116
Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.2%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.
Description
Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers to force the download and execution of arbitrary code by setting the BaseURL property and invoking the UpdateEngine method. NOTE: some of these details are obtained from third party information.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 10.17% probability · 95th percentile
- CISA KEV
- Not listed
- Affected
- rising antivirus international/rising web scan object
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/29109Vendor Advisory
- http://www.securityfocus.com/bid/27997Patch
- http://www.vupen.com/english/advisories/2008/0683/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40838
- https://www.exploit-db.com/exploits/5188
- http://secunia.com/advisories/29109Vendor Advisory
- http://www.securityfocus.com/bid/27997Patch
- http://www.vupen.com/english/advisories/2008/0683/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/40838
- https://www.exploit-db.com/exploits/5188
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.