CVE-2019-12809: Download of Code Without Integrity Check

Yes24ViewerX ActiveX Control 1.0.327.50126 and earlier versions contains a vulnerability that could allow remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method. This can be leveraged for code execution...

PT-2019-12959

Name of the Vulnerable Software and Affected Versions Yes24ViewerX ActiveX Control versions 1.0.327.50126 and earlier Description The issue allows remote attackers to download and execute arbitrary files by setting the arguments to the ActiveX method, which can be leveraged for code execution...