CVE-2008-1700

Опубликовано: 08 апр. 2008

Источник: nvd

CVSS2: 7.1

EPSS Низкий

Описание

The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.

Ссылки

http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
Broken Link
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41757
Third Party Advisory
VDB Entry
http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
Broken Link
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41757
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:interwoven:worksite_web:*:*:*:*:*:*:*:*

Версия до 8.2 (включая)

EPSS

Процентиль: 72%

0.00701

Низкий

7.1 High

CVSS2

Дефекты

CWE-770

Связанные уязвимости

GHSA-rfj9-gw43-8w26

github

почти 4 года назад