CVE-2013-5026 Code injection in n/a
Remote attackers can execute arbitrary code via a malicious DLL download triggered by an ActiveX control in National Instruments Lookout.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2013-5026?
CVE-2013-5026 is a critical code injection vulnerability in n/a, published on 6 Aug 2013. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attackers to execute arbitrary code by triggering the download of, and calls to, an arbitrary DLL file.
Which versions are affected by CVE-2013-5026?
It affects 1 product.
Products include Ni Lookout.
How do I fix CVE-2013-5026?
No fix has been published for CVE-2013-5026 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2013-5026 being exploited?
There is no known exploitation of CVE-2013-5026 in the wild and no public exploit code.
Sources
Also known as GHSA-v734-3vmr-q6f3.