Unscored severity · published Apr 8, 2008
CVE-2008-1700
The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large…
–
CVSS
1.3%
EPSS
No
On KEV
Description
The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 71% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WW
Worksite Web · Interwoven
through 8.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1700
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1700
Broken Link
http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41757
More from Worksite Web
–
CVE-2008-1617
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via…