Lucene search
CertccCVE-2005-0360HistoryJul 05, 2005 - 4:00 a.m.
CVE-2005-0360
2005-07-0504:00:00
certcc
web.nvd.nist.gov
21
cve-2005-0360
microsoft
log sink class
activex control
pkmcore.dll
safe for scripting
internet explorer
remote attackers
file manipulation
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0.003
Percentile
72.0%
The Microsoft Log Sink Class ActiveX control in pkmcore.dll is marked as “safe for scripting” for Internet Explorer, which allows remote attackers to create or append to arbitrary files.
Affected configurations
Node
microsoftlog_sink_class_activex_control
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | log_sink_class_activex_control | * | cpe:2.3:a:microsoft:log_sink_class_activex_control:*:*:*:*:*:*:*:* |
References
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
High
EPSS
0.003
Percentile
72.0%
Related for CVE-2005-0360