Unscored severity · published Dec 10, 2008
CVE-2008-5404
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite…
–
CVSS
3.9%
EPSS
No
On KEV
Description
Insecure method vulnerability in the FlexCell.Grid ActiveX control in FlexCell.ocx 5.7.0.1 in FlexCell Grid ActiveX Component allows remote attackers to create and overwrite arbitrary files via the HttpDownloadFile method. NOTE: this could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FG
Flexcell Grid Control · Grid2000
5.7.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-5404
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-5404
Vendor Advisory
http://secunia.com/advisories/32829
www.securityfocus.com
http://www.securityfocus.com/bid/32443
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/46809
More from Flexcell Grid Control
–
CVE-2009-0301
Multiple insecure method vulnerabilities in the FlexCell.Grid ActiveX control (FlexCell.ocx) in FlexCell Grid Control 5.6.9 allow remote attackers to create and overwrite…