Skip to content
OpenAdvisories
High · 7.8 CVE-2019-19168 EUVD-2019-8800GHSA-q29h-6vx8-xrwg

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote …

Published May 6, 2020 · Updated Aug 5, 2024 · Assigned by krcert

Description

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download and execute remote arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.

Affected products

VendorProductAffectedFixed
RAONwiz Dext.ocx ActiveX Control in Dext5 Upload 5.0.0.116 and prior – < 5.0.0.117 5.0.0.117

References