Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2019-19164

Dext5 Upload ActiveX Arbitrary File Execution Vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
krcert

Description

dext5.ocx ActiveX Control in Dext5 Upload 5.0.0.112 and earlier versions contains a vulnerability that could allow remote files to be executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RAONWiz dext.ocx ActiveX Control in Dext5 Upload

  • Affected: 5.0.0.112 and earlieraffected
  • Fixed: 5.0.0.113affected

References