The Ultra.OfficeControl ActiveX control in OfficeCtrl.ocx 2.0.2008.801 and earlier in Ultra Shareware Ultra Office Control allows remote attackers to force the download of arbitrary files onto a client system via a URL in the first argument to the Open method, in conjunction with a full destination pathname in the first argument (SaveAsDocument argument) to the Save method.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2008-09-02T15:00:00
Updated: 2017-09-28T12:57:01
Reserved: 2008-09-02T00:00:00
Link: CVE-2008-3879
JSON object: View
NVD Information
Status : Modified
Published: 2008-09-02T15:41:00.000
Modified: 2024-02-14T01:17:43.863
Link: CVE-2008-3879
JSON object: View
Redhat Information
No data.
CWE