CVEvulnerability
CVE-2008-1617
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-04-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-189
Description
Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.
Affected configurations
• interwoven worksite web (<= 8.2)
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/29733 Vendor Advisory
- http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf Exploit
- http://www.securityfocus.com/bid/28628 Exploit
- http://www.vupen.com/english/advisories/2008/1134/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41699 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29733 Vendor Advisory
- http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf Exploit
- http://www.securityfocus.com/bid/28628 Exploit
- http://www.vupen.com/english/advisories/2008/1134/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41699 exchange.xforce.ibmcloud.com