Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hhx6-crjv-6r4j

Опубликовано: 02 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.

EPSS

Процентиль: 80%
0.01357
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
почти 17 лет назад

Argument injection vulnerability in orbitmxt.dll 2.1.0.2 in the Orbit Downloader 2.8.7 and earlier ActiveX control allows remote attackers to overwrite arbitrary files via whitespace and a command-line switch, followed by a full pathname, in the third argument to the download method.

EPSS

Процентиль: 80%
0.01357
Низкий

Дефекты

CWE-94