CVE-2008-1617 Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Se...
HighCVSS 9.3
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| interwoven worksite web | <= 8.2 | No fix listed |
References
- 29733 third-party-advisory vendor-advisory
- www.mwrinfosecurity.com exploit
- 28628 exploit vdb-entry
- ADV-2008-1134 vdb-entry
- worksite-webtransferctrl-code-execution(41699) vdb-entry