Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-7810

HandySoft ActiveX File Download and Execution Vulnerability

Description

hslogin2.dll ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. This is due to a lack of integrity verification of the policy files referenced in the update process, and a remote attacker could induce a user to crafted web page, causing damage such as malicious code infection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Handysoft, Inc. hslogin2.dll

  • unspecified to ≤ 6.7.8.4affected
  • unspecified to ≤ 7.3.4affected

References