90 matches found
CVE-2008-4471
Directory traversal vulnerability in the CExpressViewerControl class in the DWF Viewer ActiveX control AdView.dll 9.0.0.96, as used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009, allows remote attackers to overwrite arbitrary files via ".." sequences in the argument to the SaveAS...
CVE-2008-4471
The CVE-2008-4471 issue affects the DWF Viewer ActiveX control (AdView.dll 9.0.0.96) used in Revit Architecture 2009 SP2 and Autodesk Design Review 2009. A directory traversal vulnerability in CExpressViewerControl allows remote attackers to overwrite arbitrary files via ".." in the SaveAS argume...
CVE-2008-4471
creationtimestamp| type| source ---|---|--- 2008-09-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6630...
MS07-069: Cumulative Security Update for Internet Explorer (942615)
The remote host is missing the IE cumulative security update 942615. The remote version of IE is vulnerable to several flaws that could allow an attacker to execute arbitrary code on the remote host. Tenable Network Security, Inc. include"compat.inc"; if description scriptid29313;...
CVE-2007-4471
The CVE-2007-4471 entry relates to multiple vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control prior to version 10. The ActiveX control’s methods, notably httpGETToFile() and httpPOSTFromFile(), could be abused to download or upload arbitrary files and, via path traversal in ...
CVE-2006-4471
CVE-2006-4471 : In Joomla! before 1.0.11, the Admin Upload Image feature allows remote authenticated users to upload files outside the /images/stories/ directory via unspecified vectors. Affected: Joomla! prior to 1.0.11. Root cause: insufficient enforcement of directory restrictions during image...
CVE-2005-4471
CVE-2005-4471 concerns the POP3 service in Avaya Modular Messaging Message Storage Server (MSS) 2.0 SP4 and earlier. The vulnerability allows remote attackers to cause a denial-of-service (infinite loop) by sending crafted packets over the network. The available records explicitly identify the af...
CVE-2018-4471
The CVE-2018-4471 entry is rejected/not used by its CNA.
