NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.
References
Link | Resource |
---|---|
http://help.neobizbox.com/ | Vendor Advisory |
https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35982 | Not Applicable Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
History
01 Apr 2021, 12:04
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:douzone:nbbdownloader.ocx:*:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* |
|
CVSS |
v2 : v3 : |
v2 : 6.8
v3 : 7.8 |
CWE | CWE-88 | |
References | (MISC) http://help.neobizbox.com/ - Vendor Advisory | |
References | (MISC) https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35982 - Not Applicable, Third Party Advisory |
29 Mar 2021, 17:41
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-03-29 16:15
Updated : 2023-12-10 13:55
NVD link : CVE-2020-7850
Mitre link : CVE-2020-7850
CVE.ORG link : CVE-2020-7850
JSON object : View
Products Affected
microsoft
- windows
douzone
- nbbdownloader.ocx
CWE
CWE-88
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')