Skip to content
OpenAdvisories
Unscored CVE-2019-12809 EUVD-2019-4391GHSA-992x-5j6f-hjqq

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and …

Published Aug 15, 2019 · Updated Aug 4, 2024 · Assigned by krcert

Description

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution.

Affected products

VendorProductAffectedFixed
YES24 YES24 PC VIEWER 1.0.327.50126 —

References