Skip to content
OpenAdvisories
High · 7.8 CVE-2019-19164 EUVD-2019-8796GHSA-m3gr-2w33-7p4p

Dext5 Upload ActiveX Arbitrary File Execution Vulnerability

Published May 7, 2020 · Updated Aug 5, 2024 · Assigned by krcert

Description

dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected products

VendorProductAffectedFixed
RAONWiz dext.ocx ActiveX Control in Dext5 Upload Affected: 5.0.0.112 and earlier, Fixed: 5.0.0.113 —

References