CVE-2019-19161

Опубликовано: 30 июн. 2020

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

CyMiInstaller322 ActiveX which runs MIPLATFORM downloads files required to run applications. A vulnerability in downloading files by CyMiInstaller322 ActiveX caused by an attacker to download randomly generated DLL files and MIPLATFORM to load those DLLs due to insufficient verification.

Ссылки

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479
Third Party Advisory
https://www.tobesoft.com/Index.do
Third Party Advisory
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35479
Third Party Advisory
https://www.tobesoft.com/Index.do
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:cymiinstaller322_activex_project:cymiinstaller322_activex:*:*:*:*:*:*:*:*

Версия до 2016.5.26.1 (включая)

Одно из

cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_8:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%

0.00555

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-426

Связанные уязвимости

GHSA-v5hj-j267-vhm7

github

больше 3 лет назад