CVE-2008-1617

CVE-2008-1617 describes a double-free vulnerability in Interwoven WorkSite 8.2 Web components, specifically the Web TransferCtrl Class ActiveX control (iManFile.cab). The flaw occurs in handling the Server property of the control, allowing a remote attacker to execute arbitrary code by setting th...

CVE-2008-1700

The issue concerns WorkSite Web 8.2 before SP1 P2 using the Web TransferCtrl Class (iManFile.cab). A vulnerability allows remote attackers to cause a denial of service via a large number of SendNrlLink directives, each opening a separate window and consuming memory. Affected software: WorkSite We...