6.5 Medium
AI Score
Confidence
High
0.047 Low
EPSS
Percentile
92.7%
WebArchiveX.dll 5.5.0.76 installed before September 6th, 2005 is marked safe for scripting by default, which allows remote attackers to read or write to arbitrary files via the (1) MakeArchive or (2) MakeArchiveStr methods.
marc.info/?l=bugtraq&m=112611388014937&w=2
secunia.com/advisories/16722/
security-assessment.com/Advisories/WebArchiveX_-_Unsafe_Methods_Vulnerability.pdf
www.securityfocus.com/bid/14760
www.securitytracker.com/alerts/2005/Sep/1014867.html
exchange.xforce.ibmcloud.com/vulnerabilities/22188