VulnerabilityModified
CVE-2008-4699
Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method.
HIGH 9.3EPSS 27.2%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 27.2%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
Insecure method vulnerability in the ActiveX control (PAWWeb11.ocx) in Peachtree Accounting 2004 allows remote attackers to execute arbitrary programs via the ExecutePreferredApplication method.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 27.23% probability · 98th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/peachtree accounting
- Source
- cve@mitre.org
References
- http://jbrownsec.blogspot.com/2008/09/peachtree-accounting-is-not-safe.html
- http://secunia.com/advisories/31809
- http://securityreason.com/securityalert/4471
- http://www.securityfocus.com/bid/31096Exploit
- http://www.securitytracker.com/id?1020842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45009
- https://www.exploit-db.com/exploits/6414
- http://jbrownsec.blogspot.com/2008/09/peachtree-accounting-is-not-safe.html
- http://secunia.com/advisories/31809
- http://securityreason.com/securityalert/4471
- http://www.securityfocus.com/bid/31096Exploit
- http://www.securitytracker.com/id?1020842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45009
- https://www.exploit-db.com/exploits/6414
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.