CVE-2019-12809CWE-494

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary…

published August 15, 2019

CVSS
—
EPSS
1%
Percentile
63.4
In the wild
Unconfirmed
What it is

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01030 · 63.4th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2019-08-15T18:53Z
EPSS history
Timeline
  • 15 AUG 18:53Z
    Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary…
    cvelistv5