Skip to content
OpenAdvisories
High · 7.8 CVE-2019-19169 EUVD-2019-8801GHSA-7mrg-rx92-2rfc

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by s…

Published May 6, 2020 · Updated Aug 5, 2024 · Assigned by krcert

Description

Dext5.ocx ActiveX 5.0.0.116 and eariler versions contain a vulnerability, which could allow remote attacker to download arbitrary file by setting the arguments to the activex method. This can be leveraged for code execution.

Affected products

VendorProductAffectedFixed
RAONwiz Dext.ocx ActiveX Control in Dext5 Upload 5.0.0.116 and prior – < 5.0.0.117 5.0.0.117

References