Skip to content
OpenAdvisories
High · 7.8 CVE-2020-7850 EUVD-2020-28782GHSA-fmfv-jgwf-v4g5

Douzone ActiveX File Download and Execution Vulnerability

Published Mar 29, 2021 · Updated Aug 4, 2024 · Assigned by krcert

Description

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected products

VendorProductAffectedFixed
DOUZONE ICT GROUP. NBBDownloader.ocx 1.0.0.13 – ≤ 1.0.0.12 —

References