CVE-2019-12809CWE-494

CVE-2019-12809: vulnerability in YES24 PC VIEWER

Published · Updated

Follow this CVE+ Monitor YES24 PC VIEWER

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.0%
Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.
Affected products
YES24 · YES24 PC VIEWER