CVE-2016-9470

2017-03-2802:59:01

Google

osv.dev

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

Revive Adserver before 3.2.5 and 4.0.0 suffers from Reflected File Download. www/delivery/asyncspc.php was vulnerable to the fairly new Reflected File Download (RFD) web attack vector that enables attackers to gain complete control over a victim’s machine by virtually downloading a file from a trusted domain.

CPENameOperatorVersion
revive-adservereq3.2.1
revive-adservereq3.0.3
revive-adservereq3.0.1
revive-adservereq3.0.0
revive-adservereq3.0.6
revive-adservereq3.2.0
revive-adservereq3.2.0-beta
revive-adservereq3.1.0
revive-adservereq4.0.0-rc1
revive-adservereq3.0.2

Name	Operator	Version
revive-adserver	eq	3.2.1
revive-adserver	eq	3.0.3
revive-adserver	eq	3.0.1
revive-adserver	eq	3.0.0
revive-adserver	eq	3.0.6
revive-adserver	eq	3.2.0
revive-adserver	eq	3.2.0-beta
revive-adserver	eq	3.1.0
revive-adserver	eq	4.0.0-rc1
revive-adserver	eq	3.0.2