Unscored severity · published Apr 8, 2008
CVE-2008-1617
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via…
–
CVSS
4.4%
EPSS
No
On KEV
Description
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WW
Worksite Web · Interwoven
through 8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1617
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1617
Vendor Advisory
http://secunia.com/advisories/29733
Exploit
http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
Exploit
http://www.securityfocus.com/bid/28628
www.vupen.com
http://www.vupen.com/english/advisories/2008/1134/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41699
More from Worksite Web
–
CVE-2008-1700
The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large…