CVE-2008-3879

EPSS 3.7%

The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6319unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31632 http://securityreason.com/securityalert/4201 https://exchange.xforce.ibmcloud.com/vulnerabilities/44750 https://www.exploit-db.com/exploits/6319 http://www.securityfocus.com/bid/30863 http://www.shinnai.net/index.php?mod=02_Forum&group=Security&argument=Remote_performed_exploits&topic=1219827906.ff.php http://www.shinnai.net/xplits/TXT_NPku7jFjRufaz85U6Lxn.html