Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2020-7850

Douzone ActiveX File Download and Execution Vulnerability

Description

NBBDownloader.ocx ActiveX Control in Groupware contains a vulnerability that could allow remote files to be downloaded and executed by setting the arguments to the activex method. A remote attacker could induce a user to access a crafted web page, causing damage such as malicious code infection.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

DOUZONE ICT GROUP. NBBDownloader.ocx

  • 1.0.0.13 to ≤ 1.0.0.12affected

References