Lucene search

K
cve[email protected]CVE-2008-7122
HistoryAug 31, 2009 - 10:30 a.m.

CVE-2008-7122

2009-08-3110:30:00
web.nvd.nist.gov
17
vulnerability
activex control
epregpro.ocx
remote attack
registry manipulation
nvd
cve-2008-7122

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

Multiple insecure method vulnerabilities in an ActiveX control in (epRegPro.ocx) in Evans Programming Registry Pro allow remote attackers to read and modify sensitive registry keys via the (1) About, (2) CreateKey, (3) DeleteBranch, (4) DeleteKey, (5) DeleteValue, (6) EnumKeys, (7) EnumValues, (8) QueryType, (9) QueryValue, (10) RenameKey, and (11) SetValue methods.

Affected configurations

NVD
Node
evansprogrammingregistry_pro

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.1%

Related for CVE-2008-7122