CVEvulnerability

CVE-2008-1700

7.1 HIGH Published 2008-04-08 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2008-04-08
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.1 HIGH — AV:N/AC:M/Au:N/C:N/I:N/A:C
Weaknesses: CWE-770

Description

The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives, which opens a separate window for each directive.

Affected configurations

• interwoven worksite web (<= 8.2)

Weakness · CWE (1)

CWE-770 Allocation of Resources Without Limits or Throttling weakness

Referenced by CWE · observed example (2)

CWE-400 Uncontrolled Resource Consumption weakness
CWE-770 Allocation of Resources Without Limits or Throttling weakness

References

http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf Broken Link, Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41757 Third Party Advisory, VDB Entry
http://www.mwrinfosecurity.com/publications/mwri_interwoven-worksite-activex-control-remote-code-execution_2008-03-10.pdf Broken Link, Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41757 Third Party Advisory, VDB Entry