CVE-2008-5404 Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the Ht...
HighCVSS 10.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| grid2000 flexcell grid control | = 5.7.0.1 | No fix listed |
References
- 32829 third-party-advisory vendor-advisory
- 32443 vdb-entry
- flexcell-grid-file-overwrite(46809) vdb-entry