2 matches found
CVE-2022-23763
Summary: CVE-2022-23763 is an origin validation error in NeoRS’s ActiveX module that allows remote attackers to cause users to download and execute arbitrary files by visiting crafted web pages. The vulnerability affects NeoRS ActiveX/related components and is described across multiple sources (N...
CVE-2020-7880
The CVE-2020-7880 entry concerns the NeoRS remote support program’s ActiveX module. The underlying flaw is improper parameter validation of the StartNeoRS function in the ActiveX component, enabling a remote attacker to download and execute a remote file. Affected software is the NeoRS ActiveX/re...