Unscored CVE-2008-1617 EUVD-2008-1618GHSA-6gjh-h486-gr33

Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attack…

Published Apr 8, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.

References

28628 vdb-entry
ADV-2008-1134 vdb-entry
http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
29733 third-party-advisory
worksite-webtransferctrl-code-execution(41699) vdb-entry