Lucene search

K
nvd[email protected]NVD:CVE-2009-0865
HistoryMar 10, 2009 - 2:30 p.m.

CVE-2009-0865

2009-03-1014:30:00
CWE-22
web.nvd.nist.gov

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

Directory traversal vulnerability in the SnapShotToFile method in the GeoVision LiveX (aka LiveX_v8200) ActiveX control 8.1.2 and 8.2.0 in LIVEX_~1.OCX allows remote attackers to create or overwrite arbitrary files via a … (dot dot) in the argument, possibly involving the PlayX and SnapShotX methods.

Affected configurations

NVD
Node
geovisionlivex_activex_controlMatch8.1.2.0
OR
geovisionlivex_activex_controlMatch8.2.0.0

8.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:N/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.008 Low

EPSS

Percentile

81.3%

Related for NVD:CVE-2009-0865