CVEvulnerability

CVE-2020-7826

9.8 CRITICAL Published 2020-07-17 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-07-17
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-494

Description

EyeSurfer BflyInstallerX.ocx v1.0.0.16 and earlier versions contain a vulnerability that could allow remote files to be download by setting the arguments to the vulnerable method. This can be leveraged for code execution. When the vulnerable method is called, they fail to properly check the parameters that are passed to it.

Affected configurations

• eyesurfer bflyinstallerx.ocx (<= 1.0.0.16)

Related

Weakness · CWE (1)

  • CWE-494 Download of Code Without Integrity Check weakness

References