CVE-2008-5404 File upload in n/a
Remote attackers can overwrite arbitrary files via the HttpDownloadFile method in FlexCell Grid ActiveX, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2008-5404?
CVE-2008-5404 is a critical vulnerability in n/a, published on 9 Dec 2008. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Which versions are affected by CVE-2008-5404?
It affects 1 product.
Products include Grid2000 Flexcell Grid Control.
How do I fix CVE-2008-5404?
No fix has been published for CVE-2008-5404 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-5404 being exploited?
There is no known exploitation of CVE-2008-5404 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-m9q3-rc88-v84j.