Unscored CVE-2005-1045 EUVD-2005-1048GHSA-xr3p-ggh8-8r4x

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote …

Published Apr 12, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

OpenText FirstClass 8.0 client does not properly sanitize strings before passing them to the Windows ShellExecute API, which allows remote attackers to execute arbitrary commands via a UNC path in a bookmark.

References

15356 vdb-entry
13079 vdb-entry
1013665 vdb-entry
14898 third-party-advisory
20050408 OpenText FirstClass 8.0 Client Arbitrary File Execution mailing-list
firstclass-bookmark-command-execution(20032) vdb-entry