CVE-2015-2096 Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP ad...
MediumCVSS 6.8
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Use-after-free vulnerability in the Connect function in the WESPMonitor.WESPMonitorCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via an invalid IP address and a page reload.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webgateinc edvr manager | = 2.6.4 | No fix listed |
References
- 72849 vdb-entry
- www.zerodayinitiative.com